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File: USPT 



May 20, 2003 



DOCUMENT-IDENTIFIER: US 6567919 Bl 

TITLE: Authenticated communication procedure for network computers 



Abstract Text (1) : 

Authentication of a request by a computer for access to a resource is accomplished 
by means of a randomly generated password that can only be used a limited number of 
times . In a disclosed embodiment of the invention, a network computer sends a boot 
request to a network server. In response, the network server generates a random 
password, and sets a use counter to a value which indicates the number of times 
that the password can be used for access to network resources . This password is 
transmitted to the network computer, which uses it to initiate a session with a 
network file server, and access network resources . The network server then 
invalidates the password, by decrementing the use counter to zero. As a result, 
even if the password becomes known to an unauthorized user as it is being 
transmitted from the network server to the network computer, it cannot be 
improperly employed to gain access to any network resources . 

Brief Summary Text (5) : 

As the sophistication and use of local area networks continues to evolve, more and 
more functions are being provided by centralized network servers, rather than the 
individual workstations themselves. For example, to facilitate backup and 
retrieval, it has become a common practice to store all data files on a network 
file server, rather than on local media at the individual workstations. Other types 
of services are also being handled at the network server, for example external 
connections to remote sites. Consequently, there has been a move toward so -called 
network computing, which reduces the need for fully-featured computers at each user 
location. Typically, the network computer at each user node in such a system might 
consist solely of a microprocessor, random access memory, input devices such as a 
keyboard and mouse, and a display monitor. All other devices associated with the 
computing environment, e.g., file storage, modems, printers, etc. are associated 
with, and controlled by, the network server. Since the individual terminals located 
at the user nodes contain a minimal amount of hardware, the cost of this type of 
arrangement is significantly less than a local area network which employs personal 
computers, or similar types of fully-featured computers, at the user nodes. 

Brief Summary Text (9) : 

In accordance with the present invention, authentication of a request by a computer 
for access to system resources is accomplished by means of a randomly generated 
password that can only be used a limited number of times . In an exemplary 
embodiment of the invention, when a network computer is turned on, it sends a boot 
request to a network server. In response, the network server generates a random 
password, and stores the password in a file to indicate that it is associated with 
the network computer that issued the boot request. In addition, a use counter is 
set to a value which indicates the number of times that the password can be used 
for access to network resources, preferably once. This password is transmitted to 
the network computer, which then uses it to initiate a session with a network file 
server, and mount a storage volume. Once the storage volume has been mounted, the 
network computer has access to the files on that volume, and the password is no 
longer needed. Consequently, the network server invalidates the password, by 
setting the use counter to zero. As a result, even if the password becomes known to 
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an unauthorized user as it is being transmitted from the network server to the 
network computer, it cannot be subsequently employed to gain access to any network 
resources . 

Detailed Description Text (14): 

After confirmation that the requesting network computer has been previously 
registered, or after newly registering the network computer, the user's password is 
set to a randomly generated value, at step 44. In addition, a use count value is 
stored in connection with the password. The use count is set to a minimal number, 
to limit the number of times the newly generated password can be used to access 
network resources . FIG. 4 illustrates an example of various entries that might 
appear in the user registry 38. For each user, the registry contains a listing of 
its hardware address 4 6, user identification 48, assigned storage volume 50, 
password 52 and use count 54 . In a preferred embodiment of the invention, when the 
password is generated, its use count is set to a value of one. In the particular 
example illustrated in FIG. 4, the first and third network computers in the 
registry, NCI and NC3, are currently undergoing the boot process, and therefore 
their use count- values are equal to one. All the other registered network computers 
have a use count value of zero, for reasons explained in detail hereinafter. 
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File: USPT 



Aug 23, 1994 



DOCUMENT-IDENTIFIER: US 5341491 A 

TITLE: Apparatus and method for ensuring that lock requests are serviced in a 
multiprocessor system 

Abstract Text (1) : 

A lockout avoidance circuit is provided for a plurality of nodes which generate 
lock requests for a shared resource such as a memory location. The circuit insures 
that lock requests are eventually satisfied. A lock queue includes a plurality of 
registers pipelined together. Lock requests only enter the lock queue if they are 
refused access to a shared resource a predetermined number of times . A first 
register is the head of the queue and the last register is the bottom of the queue. 
An enabling circuit allows the queue to store in the registers lock requests 
received from the different nodes in the order in which they are initially refused 
service. The enabling circuit operates the queue by pushing the stored lock 
re q U ests toward the head of the queue each time the head entry in the queue is 
serviced. The lockout avoidance circuit is implemented at each level of the system 
wherein a lockout condition can occur. 

Brief Summary Text (8) : 

The present invention overcomes these problems by providing an efficient and simple 
hierarchical system of lock out avoidance mechanisms for use in systems having 
central locations for receiving the lock requests. To avoid lock out each of the 
mechanisms uses a centralized queueing structure called a lock queue. The 
centralized queueing mechanism is used because all interlock signals, e.g. lock 
requests and unlock requests, are received at the central location. The lock queue 
contains as many entries as there are possible nodes from which lock requests can 
originate, but no one entry is specifically tied to any node. Each entry in the 
lock queue contains a valid indication field and a node identification (I.D.) 
field. The valid indication field indicates whether the lock request is valid and 
the node I.D. field stores the identification of the node generating the lock 
request. The lock queue further has a head and a tail entry. The head points to the 
first entry, i.e., the highest priority entry, in the queue and the tail points to 
the first available entry in the lock queue. Each time the head of the queue is 
serviced, i.e., its lock request is satisfied, the head of the queue moves to the 
next entry in line. If one of the nodes already has an entry in the queue which has 
not yet been serviced, then subsequent lock requests from that node will be written 
into the same place in the lock queue. This is possible because the entries only 
contain the node ID and not the request itself. In this manner, the lock queue need 
only contain a number of entries corresponding to the number of nodes from which 
lock requests can originate. 

Brief Summary Text (9) : 

The lock queue is usually empty and lock requests, from the various nodes passing 
through the central location, only enter the lock queue, if, after a predetermined 
number of tries, they are unable to gain access to a particular resource . For 
example, assume that a lock request from node 0 is refused access because the 
particular memory location was already locked or a register for allowing the lock 
request was not available, then the central location increments a refusal counter 
for the particular node. When the node, in this case node 0, retries its lock 
request, it will then again be either refused or granted access. If the lock 
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request is refused a predetermined consecutive number of times while the lock queue 
is empty, then the node's I.D. will be stored at the head of the lock queue along 
with an indication of its validity. 

Brief Summary Text (11) : 

In this manner, a lock out avoidance mechanism is operated such that if the lock 
queue is empty, it is difficult to enter the lock queue because a particular lock 
request must be refused the predetermined number of times before the lock request 
may enter the queue. Once in the queue, the lock requests are serviced serially 
which slows down the system. Therefore, the lock queue is operated to try to keep 
the queue empty by using the refusal counter . This operation ensures that the queue 
is usually empty. However, once the lock queue is no longer empty, all future lock 
requests are serviced strictly by their queue position. This operation continues 
until the lock queue again becomes empty. Thus, the lock out avoidance mechanism at 
this level guarantees that each node will eventually have its lock request 
serviced . 

Detailed Description Text (23) : 

The write control logic 8 6 provides a LOCK REGISTER WRITE CONTROL signal to each of 
the registers 88 in the lock registers 80a-80n. Further, the write control block 86 
provides a LOCK QUEUE REGISTER WRITE CONTROL signal to enable the multiplexers 96a- 
96d associated with state devices 94a-94d to operate in accordance with the lock 
queue 130 design. Also, a REFUSAL COUNTER INCREMENT CONTROL signal is provided from 
write control 86 to a plurality of refusal counters 131-136. Each refusal counter 
is associated with a node, such as CPU modules 0-3 (FIG. 1) in the system. The 
refusal counters 131-136 are incremented by signals from the write control 86. Once 
a particular refusal counter reaches a predetermined limit, an END OF COUNT signal 
is provided to the write control 86. The predetermined limit in the refusal counter 
is optimized for the best performance for lock requests in the system. The write 
control 86 further receives from the arbiter 51 (FIG. 2) a LOCK CLEAR and LOCK SET 
signal . 

Detailed Description Text (28) : 

Referring back to FIG. 4, when a match is generated from one of the comparators 90 
in one of the lock registers 80a-80n, a signal is sent over line 200 to the write 
control 86. The match indicates that the memory location is currently locked. The 
write control 8 6 then provides a REFUSAL COUNTER INCREMENT CONTROL signal. The 
REFUSAL COUNTER INCREMENT CONTROL signal enables the particular refusal counter 
130-136 associated with the node generating the READ LOCK command which was 
refused. This signal increments the counter . 

Detailed Description Text (29) : 

Similarly, when all of the lock registers 80a-80n are filled with a valid address 
and not the address for which the lock is requested, then the LOCK MISS signal 
provided from OR gate 82 to the write control 8 6 will enable the REFUSAL COUNTER 
INCREMENT CONTROL signal. This is possible because the write control 86 internally 
tracks the number of valid lock registers and therefore knows when the lock 
registers 80a-80n are filled. 

Detailed Description Text (30) : 

Once a refusal counter 131-136 has been incremented a predetermined number of 
times, the END OF COUNT signal is provided to the write control 86. This generates 
a LOCK QUEUE REGISTER WRITE CONTROL signal from the write control 8 6 to the lock 
queue 130. The node source ID and the lock queue register valid bit (FIG. 4b) are 
then loaded and set, respectively, into the top of the queue 94d by enabling the 
multiplexer 96d for the particular READ LOCK command and associated address from 
bus 36. This lock request then becomes the head of the lock queue 130. Once the 
lock queue 130 contains a valid entry, any subsequent lock requests from other 
nodes will be automatically refused (regardless of whether the other conditions for 
refusing locks are satisfied) and will be stored in the queue 130. 
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Detailed Description Text (36) : 

An example of the lockout avoidance mechanism operation will now be given. Lock 
requests are generated from the various nodes (FIG. 1) in the form of READ LOCK 
commands and an associated address location and are received by the central unit 15 
through their respective port logics 4 9a. The request passes through the scheduling 
logic 66 and into the lock logic 71 (FIG. 2) on bus 36. As long as the lock request 
is not refused by the lock logic 71, the request does not enter the lock queue 130 
(FIG. 4). However, assuming the lock request from node 0, i.e., CPU 0, is refused 
because the particular location in memory has already been locked or because no 
free lock registers 80a-80n are available for allocation to the lock request, then 
the write control 86 increments the refusal counter 131-136 for the particular 
node, in this case CPU 0. After a predetermined period of time, CPU 0 again retries 
its lock request. If the lock request from CPU 0 is again refused, its respective 
refusal counter is incremented once more. Once a lock request has been refused a 
predetermined consecutive number of times while the lock queue 130 remains empty, 
the write control 86 then places the identification for the particular node at the 
head of the lock queue 130. Only the node ID (FIG. 4b) is stored in the lock queue 
and not the address of the lock request that was refused. 

Detailed Description Text (38) : 

This operation assures that whenever the lock queue 130 is empty, it is difficult 
to enter the lock queue 130 because the lock requests from a particular node must 
be refused a predetermined consecutive number of times. Therefore, the lock queue 
130 is predominantly kept empty, assuming the refusal counter is set at a high 
enough value. However, once the lock queue 130 has an entry, all future lock 
requests are serviced strictly by their lock queue position, i.e., the head of the 
queue gets satisfied first, the second entry is satisfied next, etc. This operation 
continues until the lock queue 130 is again empty. 

Detailed Description Text (47) : 

The protocol used in the CF chip to avoid lockouts is essentially similar to the 
lock queue 130 used in the central unit. However, in this instance there is no need 
to implement a refusal counter in the CF chip 100, because the frequency at which 
lock requests are generated from the X chip at the CPU level is not great enough to 
require the use of a refusal counter . 

CLAIMS : 

2. A lockout avoidance circuit according to claim 1, wherein: 

the means for counting refused lock requests comprises a plurality of counters 
coupled to said means for enabling, each one of said counters being associated with 
one of said nodes; 

a count signal is provided to said means for enabling from one of said counters in 
response to the counter having reached a predetermined number of refused lock 
requests; and 

said means for enabling stores a particular lock request from one of said nodes in 
the queue in response to the count signal associated with said node. 

3. A lockout avoidance circuit according to claim 2 further comprising means for 
storing all subsequent lock requests from any of said nodes in the queue after the 
means for enabling has received the count signal from a counter . 

6. A method for avoiding lockout of lock requests generated from a plurality of 
nodes coupled to a central location, the method comprising the steps of: 

incrementing a counter associated with a particular one of the nodes when a lock 
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request from said particular node is refused in the central location; 

generating an end of count signal from said counter when the lock request is 
refused a predetermined number of times; 

storing the lock request as a head entry in a queue once the end of count signal is 
generated; 

subsequently storing any further lock requests from different nodes as further 
entries in said queue once the queue contains a head entry; and 

operating said queue to the entries in the order in which they are placed in the 
queue . 

13. A circuit for servicing lock requests for memory locations generated from a 
plurality of nodes, comprising: 

a plurality of lock registers, each of the lock registers including a storage 
device and a comparator having first and second inputs, said lock requests being 
provided to the first input of the comparator and to an input of the storage 
device, an output of the storage device being coupled to the second input of the 
comparator; 

a lock queue coupled to said lock registers, the lock queue receiving lock requests 
at its inputs, the lock queue including a plurality of queue registers; 

a control circuit coupled to the lock registers and lock queue for controlling the 
circuit operation; 

a plurality of counters each providing a count signal to the control circuit, the 
number of counters and queue registers equalling the number of nodes from which 
lock requests are generated; 

said control circuit including 

a first signal for operating the lock registers; 
a second signal for operating the lock queue; and 
a third signal for operating the counters . 

16. A circuit according to claim 15 wherein the lock refused signal enables the 
control circuit to generate the third signal to the respective counter associated 
with the node generating the lock request. 

17. A circuit according to claim 16 wherein the counters are set to a predetermined 
value, said third signal incrementing the respective counter . 

18. A circuit according to claim 17 comprising: 

an end of count signal output from said counters once they reach their 
predetermined value, the end of count signal provided to the control circuit to 
activate the second signal. 
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□ 1. Document ID: US 6636721 B2 

Lll: Entry 1 of 27 File: USPT Oct 21, 2003 

US-PAT-NO: 6636721 

DOCUMENT-IDENTIFIER: US 6636721 B2 

TITLE: Network engineering/systems system for mobile satellite communication system 
DATE-ISSUED : October 21, 2003 
INVENTOR- INFORMATION : 

NAME CITY STATE ZIP CODE COUNTRY 

Threadgill; Michael E. Rest on VA 

Lin; ShihChao Reston VA 



ASSIGNEE-INFORMATION: 

NAME CITY STATE ZIP CODE COUNTRY TYPE CODE 

Mobile Satellite Ventures, LP Reston VA 02 



APPL-NO: 09/ 918550 [PALM] 
DATE FILED: August 1, 2001 



PARENT-CASE: 

RELATED APPLICATION This application is a continuation of U.S. application Ser. No. 
08/931,622, filed Sep. 16, 1997 now U.S. Pat. No. 6,272,341 which in turn is a 
continuation of, and claims priority to, U.S. application Ser. No. 08/601,749, 
filed Feb. 15, 1996, now U.S. Pat. No. 5,713,075, which inturn claims priority from 
U.S. provisional application Serial No 60/007,804, entitled "Network Engineering 
and System Engineering System" filed Nov. 30, 1995, the details of which are 
incorporated herein by reference. 
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"The AMSC/TMI Mobile Satellite Services (MSS) System Ground Segment Architecture", 
J. Lunsford, et al . , American Institute of Aeronautics and Astronautics, Inc., 
1992, pp. 405-426. 

"Call Control in the AMSC Mobile Satellite Services System", William R.H. Tisdale, 
et al., Pre-Publication Review Copy, American Institute of Aeronautics and 
Astronautics, Mar. 1, 1994, pp. 1-13. 

"Westinghouse MSAT Mobile Terminal Channel Emulator", A. Fasulo et al., American 
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Electric Corporation, 1993. 
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"The American Mobile Satellite Corporation Space Segment", David J. Whalen, et al., 
1992, 99. 394-404. 

ART-UNIT: 2683 

PRIMARY-EXAMINER: Cumming; William 
ABSTRACT: 

A mobile satellite system includes a network engineering/systems engineering 
(NE/SE) system. The NE/SE performs the processes of comparing expected traffic 
loads with capability and availability of space and ground resources in the mobile 
satellite system, formulating tactical plans to maximize available resources of the 
satellite, and producing frequency plans for different geographical regions and 
defining circuit pools for different groups of users. 

12 Claims, 45 Drawing figures 
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module. The client module interprets the response and presents the response to the 
user via a structured user interface. Alternatively, the user transmits a request 
that directs the server to transmit the response to the request to another location 
or to another user. 
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ABSTRACT : 

Systems and methods for synchronizing multiple copies of data in a network 
environment that includes servers and clients so that incremental changes made to 
one copy of the data can be identified, transferred, and incorporated into all 
other copies of the data. The synchronization can be accomplished regardless of 
whether modifications to the data have been made by a client while the client is in 
an on-line or off-line mode of operation. The clients cache data locally as data 
are modified and downloaded. The caching enables the clients to access the data and 
allows the synchronization so be performed without transmitting a particular 
version more than once between a client and a server. Such elimination of redundant 
data transmission results in an efficient use of time and network bandwidth. 
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transmits a response over the two-way data communication network to the client 
module. The client module interprets the response and presents the response to the 
user via a structured user interface. Alternatively, the user transmits a request 
that directs the server to transmit the response to the request to another location 
or to another user. 
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ASSISTANT -EXAMINER: Jeanty; Romain 
ATTY-AGENT-FIRM: Beyer Weaver & Thomas, LLP 

ABSTRACT: 

An electronic statement presentment (ESP) system replaces the preparation and 
mailing of paper statements and invoices from a biller with electronic delivery. 
Electronic statements have the same look as paper statements as well as including 
video, audio, graphics, and custom enclosures. Statements are segmented into 
mandatory and optional components to minimize download time. The ESP system 
operates independently or is an enhancement to any suitable electronic bill payment 
system. A central switch computer coordinates template storage, validation, routing 
and message passing between billers, workstations and consumer financial 
institutions (CFI) . A template authoring workstation (TAWS) creates a template of 
static biller information to serve as a basis for the electronic statement. The 
template is stored in a template library at the switch. The switch validates the 
template by sending it to a template validation workstation (TVAL) . Batches of 
customer statement data are sent from a biller ! s legacy invoicing system to a 
statement origination workstation (SORG) along with a template identifier . 

21 Claims, 20 Drawing figures 
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ART-UNIT: 2644 

PRIMARY-EXAMINER: Edouard; Patrick N . 
ATTY-AGENT-FIRM: Wolf, Greenfield & Sacks, P.C. 



ABSTRACT : 



A computer-implemented system, method, and product associate words, phrases, or 
other characters ("words") to be translated with previous translations of such 
words, if a previous translation exists. The words to be translated, and their 
identifying attributes (such as, for example, formatting information) , are 
extracted from one or more source files. The previous translations, and their 
identifying attributes, are extracted from one or more target files. If a previous 
translation does not exist, the words to be translated, and their attributes, are 
copied to create a pseudo-previous translation, with attributes. Each word to be 
translated is associated with a corresponding previous translation based upon 
commonalities of their attributes. Such words may also be associated based upon 
their respective locations in their respective files. Each word to be translated, 
and its attributes, may be stored with a previous translation in a source-target 
pair record of a source-target pair database. Each source-target pair record may 
include a propagation flag identifying whether the previous translation stored in 
the source-target pair record is to be propagated to other occurrences of the 
associated word to be translated in the source-target pair database. Each source- 
target pair record may also include a pointer to a page of an occurrence book 
having pages, wherein each page includes pointers to a common word to be translated 
in records of the source-target pair database. 



68 Claims, 21 Drawing figures 
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Kaji et al. 
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ART-UNIT : 2 64 4 

PRIMARY -EXAMINER : Edouard; Patrick N. 
ATTY-AGENT-FIRM: Wolf, Greenfield & Sacks, P.C. 

ABSTRACT: 

A computer- implemented system, method, and product are provided to propagate an 
externally produced translation of a first occurrence of a word, phrase, or other 
group of characters to be translated (referred to herein as a "translatable source 
segment") in a first source file to at least one occurrence of a corresponding 
target segment in one or more target files of a target project. The corresponding 
target segment corresponds with a second occurrence of the translatable source 
segment in any of the one or more source files. The source files may have the same 
file format, or two or more of the source files may have different file formats. 
Also, two or more source files may have character formats that are different from 
each other, and/or they may be written in different languages. In one 
implementation, the propagator propagates the externally produced translation to 
all corresponding target segments in the target project that correspond with the 
translatable source segment. Also, the propagator may propagate the externally 
produced translation to user-selected corresponding target segments in the target 
project that corresponds with the translatable source segment. The externally 
produced language translation may be generated by a human translator, or by a 
machine translation tool. In one embodiment, the externally produced language 
translation is derived from a legacy file. Also, the externally produced language 
translation may be derived from a corresponding target segment that corresponds 
with the translatable source segment. 

59 Claims, 20 Drawing figures 
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Changes on the Web," AT&T Labs — Research and Lucent Technologies, Bell 
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ART-UNIT: 216 

PRIMARY-EXAMINER: Hong; Stephen S. 
ABSTRACT : 

The invention provides for customized "what's new" lists for users of shared lists 
of tracked resources. Identifying information, such as cookies, and state 
information are used to personalize a shared "what's new" list, so that changes to 
a document which a particular user has viewed are indicated automatically based on 
the last time that user viewed the document. Thus, the user is notified of the set 
of changes that have taken place since the user last viewed a particular set of 
documents. For any particular document, only the changes which have occurred since 
the user last viewed that document are used to form the "what's new" list and to 
view the changes if the user so chooses. Additionally, a user can select multiple 
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collections of documents into a single notification system and exclude particular 
documents or augment the collection to personalize the resources tracked for that 
user. 

26 Claims, 8 Drawing figures 
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ART-UNIT: 212 

PRIMARY-EXAMINER: Trammell; James P. 
ASSISTANT-EXAMINER: Dam; Tuan Q. 
ATTY-AGENT-FIRM: Kilpatrick Stockton LLP 

ABSTRACT: 

A method and system for installing computer programs is provided where installation 
is accomplished based on an "as complete" description of the installed features, 
components and resources of the computer program. The necessary files and 
components required for installation of a given feature or component are determined 
by marking for installation any components which are not presently installed, 
preparing a script of required installation executions, and then executing the 
instructions to install the necessary files or components. Components are marked 
for installation or un-installation in temporary columns and rows which are 
dynamically added to data tables used to identify components and features which are 
available for installation. Individual components of a feature may be added or 
removed by simply marking that component for installation or removal. When the 
instructions in the installation script are executed, that particular component 
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will be installed or removed according to the instructions. Installation of a given 
software application is streamlined because any component of a program application 
to be installed which is already installed on the user's computer need not be 
reinstalled upon the installation of the desired feature. Only components or files 
thereof which must be installed in addition to previously installed components or 
files need be installed for the installation of the software application program. 

24 Claims, 6 Drawing figures 
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ART-UNIT: 278 

PRIMARY- EXAMINER : Maung; Zarni 

ATTY-AGENT-FIRM: Sudol; R. Neil Coleman; Henry D. 
ABSTRACT: 

A computerized system and an associated method for optimally controlling storage 
and transfer of computer programs between computers on a network to facilitate 
interactive program usage. In accordance with the method, an applications program 
is stored in a nonvolatile memory of a first computer as a plurality of individual 
and independent machine-executable code modules. In response to a request from a 
second computer transmitted over a network link, the first computer retrieves a 
selected one of the machine-executable code modules and only that selected code 
module from the memory and transmits the selected code module over the network link 
to the second computer. 
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ABSTRACT: 

A method and system are provided for converting a computer program from a current 
version first language to a localized version in a target language. All resource 
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information of the program is stored in a resource dynamic link library (DLL) . A 
current version resource DLL is separated from executable code and compared by a 
leverage tool to resource DLLs of a previous version of the computer program and to 
a previous target language translation. The leverage tool stores all resource data 
from the current version resource DLL as translation records in a resource 
database. The translation records may include translation instructions and 
comments. Strings in the current version resource DLL that were present in the 
previous version, and already translated in the previous target language resource 
DLL are stored in a new target language resource DLL. Strings which are not to be 
translated to the target language are locked. In the preferred embodiment, the new 
target language resource DLL and resource database are distributed to a 
localization vendor for translation. A translation tool allows a translator to 
translate the resource database to the target language. Locked strings are not 
translated and the already-translated strings are re-used. 
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ART-UNIT: 275 

PRIMARY-EXAMINER: MacDonald; Allen R. 
ASSISTANT-EXAMINER: Jeanty; Romain 
ATTY- AGENT-FIRM: Beyer & Weaver, LLP 

ABSTRACT : 

An electronic statement presentment (ESP) system replaces the preparation and 
mailing of paper statements and invoices from a biller with electronic delivery. 
Electronic statements have the same look as paper statements as well as including 
video, audio, graphics, and custom enclosures. Statements are segmented into 
mandatory and optional components to minimize download time. The ESP system 
operates independently or is an enhancement to any suitable electronic bill payment 
system. A central switch computer coordinates template storage, validation, routing 
and message passing between billers, workstations and consumer financial 
institutions (CFI) . A template authoring workstation (TAWS) creates a template of 
static biller information to serve as a basis for the electronic statement. The 
template is stored in a template library at the switch. The switch validates the 
template by sending it to a template validation workstation (TVAL) . Batches of 
customer statement data are sent from a biller f s legacy invoicing system to a 
statement origination workstation {SORG) along with a template identifier . The 
switch sends the template to the SORG where the customer data is validated by 
comparison to the template identified . The batch of customer statement data is 
sorted by a statement generation workstation (SGEN) identifier associated with each 
customer record. The sorted batches are sent to the switch where they are routed to 
the appropriate SGEN based upon the SGEN identifier . Each SGEN generates an 
electronic statement for each customer from the statement data and the appropriate 
template. A CFI associated with each SGEN delivers each electronic statement to the 
appropriate customer using a customer identifier in the statement data and uses any 
chosen medium. 
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ATTY-AGENT-FIRM: Blakely, Sokoloff, Taylor & Zafman 
ABSTRACT: 

A method and apparatus for generating patching resources in an information 
processing system having operating instructions on a Read Only Memory Device. The 
present invention simplifies the patch generation and installation processes. A 
patch resource is generated and used by a patch installation process. Patch 
resources are generated for each ROM version by comparing previous ROM versions to 
the new ROM version. A patch resource is comprised of a plurality of entries, each 
of which defines a vector table address, an offset into the vector table and the 
routine to be inserted. By comparing routines between the ROM versions, routines 
which are different or new are identified . These routines will become patch 
resource entries. For patch installation, the ROM version number for the installed 
ROM is determined; the proper patching resource is retrieved, and the patch 
resource entries cause the patches to be installed. Patch installation is performed 
by the steps of modifying vector tables to include the addresses for the new 
routines . 
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ABSTRACT : 



A method and apparatus for controlling instrumentation systems and for providing a 
user with the capability to develop instrument drivers and application software for 
controlling instrumentation systems. The present invention provides a system 
including a software architecture which defines the control and management of an 
instrumentation system. The method of the present invention utilizes a device 
resource independence approach whereby the individual capabilities of devices are 
broken down into a plurality of objects called resources and these resources are 
then used to develop instrument drivers or instrument control applications. The 
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method of the present invention also uses object oriented technology which allows 
device resources to be easily combined to create higher level applications. The 
present invention is independent of I/O interface type, operating system, and 
programming language while also providing a common look and feel and consistent API 
to the user. The present invention includes novel methods for access control, event 
handling, resource management, and resource addressing, among others. 
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PRIMARY-EXAMINER: Kriess; Kevin A. 
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ABSTRACT: 

In a multi-version database, copies of prior committed versions (snapshots) are 
kept for access by the read-only transactions. The read-write transactions are 
selectively aborted to enforce an order of commitment of read-write transactions 
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that is the same as an order of conflicts among the read-write transactions. In a 
preferred embodiment, the read-write transactions are serialized by maintaining and 
referencing a graph of conflicts among read-write transactions, and the read-only 
transactions are serialized by a timestamp mechanism for selection of the snapshots 
to be read. Each time that a read-write transaction is committed, the read-write 
transaction is assigned a unique timestamp that is used to timestamp all resources, 
committed by the read-write transaction. Upon starting, each read-only transaction 
is also assigned a timestamp. Each read-only transaction reads only the latest 
committed versions of all resources, that are timestamped earlier than the 
timestamp of the read-only transaction. In a multiprocessing system, the timestamps 
are issued to global coordinators and distributed locally with atomic commit 
messages and global queries. Moreover, read-write transactions may selectively 
access a hierarchy of uncommitted versions to prepare for various possible 
commitment orders. The hierarchy defines a path for record access and for cascading 
aborts. A plurality of mutually-conflicting uncommitted versions may be prepared 
for each transaction to prepare for all possible commitment orders. 
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ABSTRACT: 

A Software Translation Kit (STK) system having a shell, TShell, coupled to an 
Export/Import module and various Editors is described. The Export /Import module 
itself includes a parsing engine to extract strings and translatable information 
from application programs. It functions as a front end parser to "translatable" 
sources, providing data conversion as needed. The STK system provides a standard 
interface and set of tools which can be used to localize graphic user interface 
products. By employing a datacentric approach, the system provides a standard 
platform which allows translators to act independently of the product they are 
translating . 
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ABSTRACT: 

A graphical resource editor for selectively modifying graphical resources in 
software applications provides a main window graphical user interface object for 
interaction with the graphical resource editor. The main window contains a resource 
category selection object including a list of selectable resource category objects. 
These objects contain resource category descriptors corresponding to categories of 
editable resources. The resource category selection object provides a user 
activatable interface for selecting among the list of resource category objects an 
editable resource category. The graphical resource editor further includes a system 
responsive to user activation of the resource category selection object for 
generating in the main window a list of resource descriptors corresponding to 
selected category of editable resources. A plurality of resource value display 
fields are provided in the main window for displaying resource values representing 
the status of the selected category of editable resources. Also provided in the 
main window is a set of resource value selection objects providing user activatable 
interfaces for setting editable resource values. Customization of software 
applications may performed statically by saving resource edits to an application 
resource file, or dynamically by applying resource edits on-the-fly to an 
application running concurrently with the graphical resource editor. 
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ATTY-AGENT-FIRM: Baker, Maxham, Jester & Meador 



ABSTRACT: 



A graphical resource editor for selectively modifying graphical resources in 
software applications provides a main window graphical user interface object for 
interaction with the graphical resource editor. The main window contains a resource 
category selection object including a list of selectable resource category objects. 
These objects contain resource category descriptors corresponding to categories of 
editable resources. The resource category selection object provides a user 
activatable interface for selecting among the list of resource category objects an 
editable resource category. The graphical resource editor further includes a system 
responsive to user activation of the resource category selection object for 
generating in the main window a list of resource descriptors corresponding to the 
selected category of editable resources. A plurality of resource value display 
fields are provided in the main window for displaying resource values representing 
the status of the selected category of editable resources. Also provided in the 
main window is a set of resource value selection objects providing user activatable 
interfaces for setting editable resource values. Customization of software 
applications may performed statically by saving resource edits to an application 
resource file, or dynamically by applying resource edits on-the-fly to an 
application running concurrently with the graphical resource editor. 
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A graphical system resource monitor is provided to depict, in real-time, a data 
processing system's internal resource utilization. A window or viewport of a data 
processing system displays user specified internal system resources, such as 
memory, CPU, or peripheral device availability/utilization. This graphical 
representation of the s state" of the data processing system's resources is 
maintained in real-time, while the impact on the system's performance in providing 
such information is kept to a minimum. This is accomplished through a combination 
of various techniques, including specialized device drivers for the respective 
devices coupled with a unique data reduction technique. The graphical results of 
these resource monitors are continually updated in real-time. This real-time 
support provides an immediate and accurate representation of the internal 
operations of the data processing system. Further, these resources can be monitored 
at the process level of a multiprocessing system. These representations can be used 
by a user to identify, isolate, and fine-tune the data processing system's 
resources to improve the overall efficiency of the system being monitored. 

11 Claims, 18 Drawing figures 
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PRIMARY- EXAMINER : Kriess; Kevin A. 
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ABSTRACT: 

A method and apparatus for generating an object file that facilitates patching and 
the introduction of new function. The present invention accomplishes this without 
disturbing the original source file. The present invention is particularly useful 
in the generation of programs that will exist on a static device such as a Read 
Only Memory (ROM) device. The present invention requires that access to routines in 
the object file be referenced through a vector table located in Random Access 
Memory (RAM). If a routine in ROM must be patched (i.e. replaced) or if new 
function is added, the vector table is modified. Modification may be either 
changing the contents of an existing entry (replacement) or adding a new entry (new 
function) . Generally, this modification involves the steps of: identifying the 
entry points in the object file to create a vector source table, generating a 
vector object table from the vector source table; generating a symbol table from 
the vector object table; comparing entry points in the object files to entries in 
the symbol table; when a match is found, modifying the entry point of the object 
file to reference a corresponding entry in the vector table. Since the only the 
object file is modified, the original source file is not disturbed. 
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ABSTRACT : 



An improved method and apparatus for defining resources in a computer system is 
presented whereby resource maps in a computer system can be selectively updated by 
adding resources and superseding resources in an existing resource map by providing 
a new resource map which overrides the prior resource map. 
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A method and apparatus for generating patching resources in an information 
processing system having operating instructions on a Read Only Memory Device. The 
present invention simplifies the patch generation and installation processes. A 
patch resource is generated and used by a patch installation process. Patch 
resources are generated for each ROM version by comparing previous ROM versions to 
the new ROM version. A patch resource is comprised of a plurality of entries, each 
of which defines a vector table address, an offset into the vector table and the 
routine to be inserted. By comparing routines between the ROM versions, routines 
which are different or new are identified . These routines will become patch 
resource entries. For patch installation, the ROM version number for the installed 
ROM is determined; the proper patching resource is retrieved, and the patch 
resource entries cause the patches to be installed. Patch installation is performed 
by the steps of modifying vector tables to include the addresses for the new 
routines . 
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ABSTRACT: 

A graphical system resource monitor is provided to depict, in real-time, a data 
processing system 1 s internal resource utilization. A window or viewport of a data 
processing system displays user specified internal system resources, such as 
memory, CPU, or peripheral device availability/utilization. This graphical 
representation of the 'state' of the data processing system's resources is 
maintained in real-time, while the impact on the system's performance in providing 
such information is kept to a minimum. This is accomplished through a combination 
of various techniques, including specialized device drivers for the respective 
devices coupled with a unique data reduction technique. The graphical results of 
these resource monitors are continually updated in real-time. This real-time 
support provides an immediate and accurate representation of the internal 
operations of the data processing system. Further, these resources can monitored at 
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the process level of a multiprocessing system. These representations can be used by 
a user to identify, isolate, and fine-tune the data processing system's resources 
to improve the overall efficiency of the system being monitored. 
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ABSTRACT: 



An object based data processing system including an extensible set of object types 
and a corresponding set of "object managers" wherein each object manager is a 
program for operating with the data stored in a corresponding type of object. The 
object managers in general support at least a standard set of operations. Any 
program can effect performance of these standard operations on objects of any type 
by making an "invocation" request. In response to an invocation request, object 
management services (which are available to all object managers) identifies and 
invokes an object manager that is suitable for performing the requested operation 
on the specified type of data. A mechanism is provided for linking data from one 
object into another object. A object catalog includes both information about 
objects and about links between objects. Data interchange services are provided for 
communicating data between objects of different types, using a set of standard data 
interchange formats. A matchmaker facility permits two processes that are to 
cooperate in a data interchange operation identify each other and to identify data 
formats they have in common. A facility is provided for managing shared data 
"resources". Customized versions of resources can be created and co-exist with 
standard resources. A resource retrieval function determines whether a customized 
or a standard resource is to be returned in response to each request for a 
resource. 
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ASSISTANT-EXAMINER: Chin; Jick 

ATTY-AGENT-FIRM : Blakely, Sokoloff, Taylor & Zafman 
ABSTRACT: 

The present invention provides apparatus and methods for a multi-dimensional user 
interface for use in audio visual production. A display system including a central 
processing unit (CPU) is coupled through appropriate input/output (I/O) circuitry 
to input devices, such as a keyboard, digital pad and/or track ball as well as a 
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display device. The CPU is further coupled to a hard disk drive for the storage of 
programs and data, and is also coupled to a network through which the CPU may 
communicate with a variety of system resource devices such as editors, music 
synthesizers, graphics generators, scheduling resources, audio enhancement 
resources, etc. A user viewing the interface on the display may utilize one of the 
input devices, such as by way of example, the keyboard, to select, incorporate or 
otherwise integrate the various system resources to develop a unified multi-media 
production. The user interface of the present invention includes a control frame 
which in practice substantially fills all of the display screen of the display and 
is consistent for all user applications. The control frame is comprised of control 
panels which surround a variety of subwindows and acts as a consistent control area 
for all users of the interface. Once defined, elements may be selectively placed on 
an event horizon bar in the control frame. The placement of an element on the event 
horizon results in the display of timing data for the element, relative to other 
elements on the event horizon. 

5 6 Claims, 9 Drawing figures 
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DOCUMENT- IDENTIFIER: US 6253225 Bl 

TITLE: Process executing method and resource accessing method in computer system 
Brief Summary Text (13) : 

The resource management data 105 is shown in FIG. 2A while the process management 
data 107 is shown in FIG. 2B. As can be seen in FIG. 2B, the process management 
data 107 is composed of a process identifier 207, a flag 208 indicating presence or 
absence of the next process management data, and a pointer 209 to the next process 
management data. At the end of the user application, it becomes necessary to know 
the identifier of the process having the access right in order to deallocate the 
resource occupied by the process. Thus, the operating system is provided with a 
process-specific resource identifier list 109 in which a resource identifier 110 is 
entered every time when a corresponding resource is generated or every time the 
access right to the shared resource is acquired. 

Brief Summary Text (61) : 

For achieving the above and other objects which will become apparent as description 
proceeds, it is taught according to an aspect of the present invention that an 
identifier composed of address information and generation identifying information 
of a resource is assigned to a resource upon generation thereof and at the same 
time the generation identifying information is stored at a leading location of the 
resource. The generation identifying information is extracted from an identifier 
transferred as an argument of a system call issued by a user application upon 
making access to the resource. The extracted generation identifying information is 
compared with the generation identifying information stored in the resource at the 
leading location thereof. Access to the resource is enabled when coincidence is 
found between both the generation identifying information while disabled when 
discrepancy is found between both the generation identifying information. In this 
way, the access right to the resource can be controlled solely by comparing both 
the generation identifying information. 

Drawing Description Text (23) : 

FIG. 20 is a flow chart for illustrating a generation identifying information 
creating (make_idinf) processing; 

Detailed Description Text (12): 

Referring to FIG. 6, the interval or period during which the abort-disabled flag 12 
remains in the ON-state, i.e., the period from a time point at which the abort 
disable function 21 is called to set the abort-disabled flag 12 to the ON-state to 
a time point at which the disabled-abort clear function 22 is called to set the 
abort-disabled flag 12 to the OFF-state represents the abort-disabled interval. The 
abort-disabled flag 12 is in the OFF-state when the process is created or generated 
and set to the ON-state only when the abort disable function 21 is called. In case 
the forcive termination of the process 200 occurs during the abort-disabled 
interval during which the abort-disabled flag 12 remains in the ON-state as set by 
the abort disable function 21 called by the process 200, the process management 
module 20 executes only the processing for setting the abort request flag 11 to the 
ON-state while allowing the processing of the process 200 to be continued. The 
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forcive termination of the process 200 is validated when the abort-disabled flag 12 
is set to the OFF-state by the disabled-abort clear function 22 called by the 
process 200. 

Detailed Description Text (46) : 

In FIG. 12, reference numerals 210 to 212 denote, respectively, those processes 
which are requesting use of the shared resource, and numeral 220 denotes the sole 
process that is authorized to perform the processing for a specific shared 
resource. This process 220 will hereinafter be called the serializer process. The 
serializer process 220 is resident within the system. A numeral 300 denotes a 
processing request messaging module for messaging to the serializer process 220 the 
processing requests issued by the processes 210 to 212, respectively. In 
correspondence to the serializer process 220, the sole processing request messaging 
module 300 is provided and constantly resident within the system as in the case of 
the process 220. Reference numerals 310 to 312 denote, respectively, processing 
completion messaging modules for transferring the process completion message from 
the serializer process 220 to the processes 210 to 212, wherein the processing 
completion messaging modules 310 to 312 are assigned to the processes 210 to 212, 
respectively, upon generation thereof or upon issuance of the processing request 
therefrom. The processing request messaging module 300 and the processing 
completion messaging modules 310 to 312 have internally queues 400, 410 to 412, 
respectively. 

Detailed Description Text (60) : 

An resource identifier 600 shown in FIG. 17A is an argument of 64 bits contained in 
the system call issued by a user application for using the same in the access to 
the resource. Of the 64-bit argument, the leading 32 bits are used for identifying 
a starting or leading address 601 of a resource 608 while the trailing 32 bits 
constitute generation identifying information 602. The resource identifier 600 is 
generated upon creation of the resource and used for making access to the resource 
until the resource is released or deallocated. 

Detailed Description Text (61) : 

A resource generation counter 603 shown in FIG. 17B is created for each of the 
processes upon generation thereof and serves as a counter for recording the number 
of times the resource is generated . The count value 604 of the resource generation 
counter 603 is set to the initial value of zero and incremented by one every time 
the resource is created. 

Detailed Description Text (62) : 

Generation identifying information 605 shown in FIG. 17C contains leading 16 bits 
representing a count value 606 of the resource creation counter with the trailing 
16 bits representing a process identifier 607. 

Detailed Description Text (63) : 

Hereinafter, the resource which contains the generation identifying information 609 
at a leading or starting location thereof will be referred to as the resource 608. 

Detailed Description Text (66) : 

(1) In a step 2200, a user application issues a system call requesting a process 
generating processing to the operating system, which responds thereto by creating a 
resource generation counter 603 for the process as generated . 

Detailed Description Text (72) : 

FIG. 19 shows a flow chart for illustrating the resource allocation processing step 
2201 shown in FIG. 18. The resource generation counter is incremented by one (step 
2300 in FIG. 19), wherein generation identifying information creating or making 
processing "make_idinf" is executed (step 2301), which is then followed by step 
2302 in which a resource area allocation (or memory area acquisition) processing 
"alloc mem" is executed and step 2303 of creating an identifier "make_id" is 



h eb bgeeefc eh 



e ge 



Record Display Form 



Page 3 of 5 



executed. Thereafter, the generation identifying information is stored at leading 
32 bits of the resource area as returned (step 2304). 

Detailed Description Text (73) : 

. sctn.2.1.1. Generation Identifying Information Creating (make_idinf) Processing 
Detailed Description Text (74): 

FIG. 20 shows a flow chart for illustrating the generation identifying information 
creating processing in step 2301 shown in FIG. 19. Hereinafter, this processing 
will also be referred to as "make_idinf " processing. The generation identifying 
information is created by a pair of the resource generation counter value and the 
process identifier of the process destined for the resource generation . Referring 
to FIG. 20, the process identifier is first acquired (step 2400), wherein the 
resource generation counter value is placed in the leading 16 bits while a random 
number value as generated is stored in the trailing 16 bits, to thereby create or 
make the 32-bit generation identifying information (step 2401) . The generation 
identifying information as created is returned (step 2402) . 

Detailed Description Text (76) : 

FIG. 21 shows a flow chart for illustrating the resource acquisition (or 
allocation) processing in the step 2302 shown in FIG. 19. This processing will also 
be referred to as "alloc_mem" processing. Because the resource area is constituted 
by a generation identifying information area and a resource area, the resource area 
size added with the generation identifying information data size of 32 bits is 
determined (step 2500), wherein the resource area of the size as determined is 
allocated (step 2501) . Thereafter, the leading address of the resource area (memory 
area) is returned (step 2502) . 

Detailed Description Text (78) : 

FIG. 22 shows a flow chart for illustrating the identifier creating processing in 
the step 2303 shown in FIG. 19. Hereinafter, this processing will also be referred 
to as "make_id" processing. The identifier is constituted by a pair of the resource 
address and the generation identifying information. The address of the resource 
acquired in resource area allocation or "alloc_mem" processing (step 2302) is 
placed at leading 32 bits while the generation identifying information created in 
the generation identifying information creating "make_id" processing (step 2301) is 
placed at the trailing 32 bits, to thereby create the identifier of 64 bits (step 
2600) . The identifier as created is returned as the argument for use in making 
access to the resource (step 2601) . 

Detailed Description Text (80) : 

FIG. 23 shows a flow chart for illustrating a resource access processing 
corresponding to the step 2202 in FIG. 18. Referring to FIG. 23, the leading 32 
bits of the identifier received as the argument of the system call issued by the 
user application are extracted to thereby define the resource address while the 
trailing 32 bits are extracted for defining the generation identifying information 
SI (step 2700) . Subsequently, the leading 32 bits are read out from the resource on 
the basis of the resource address to define the generation identifying information 
S2, i.e., "read_mem" information (step 2701), wherein the generation identifying 
information SI and S2 as extracted are compared with each other (step 2702) . Unless 
the comparison results in coincidence, the access to the resource is not performed, 
and an error message is returned (step 2703) . On the other hand, when the above 
comparison results in coincidence, then the access processing to the resource is 
performed (step 2704). 

Detailed Description Text (83) : 

Similarly to the resource access processing (step 2202 shown in FIG. 18), in the 
resource deallocation processing (step 2203 shown in FIG. 18), the leading 32 bits 
of the identifier received as the argument of the system call issued by the user 
application are extracted to define the resource address while the trailing 32 bits 
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are extracted for defining the generation identifying information SI (step 2800) . 
Subsequently, the leading 32 bits are read out from the resource to define the 
generation identifying information S2 "read_mem" processing (step 2801) . Then, the 
generation identifying information SI and S2 mentioned above are compared with each 
other (step 2802) . Unless the comparison results in coincidence, the resource is 
not deallocated and a corresponding error message is returned (step 2803) . On the 
other hand, when the above comparison results in coincidence, then the resource 
deallocation processing is performed (step 2804). 

Detailed Description Text (87) : 

By contrast, according to the methods of the invention, the address of the resource 
can be obtained for unlocking the resource without need for following the pointers 
for acquiring the address of the resource because the address has already been 
contained in the identifier of the resource X to be deallocated. Additionally, it 
is apparent from the previous description concerning the resource deallocation 
processing ( . sctn . 2 . 3 . ) , the operating system controls or manage the resource 
access right on the basis of only the result of comparison between the generation 
identifying information SI contained in the identifier assigned to the resource X 
and the generation identifying information S2 stored in the leading of the resource 
X. Thus, the task imposed on the operating system is only the deallocation of the 
resource X. 

Detailed Description Text (89) : 

(3) In conjunction with the resource deallocation processing described above, it is 
again assumed that a process C generates a resource Y and allocates the created 
resource Y to the address having been allocated to the resource X in the state in 
which the resource X is deallocated or released. In that case, the operating system 
issues to the process B no information or message indicating that the resource X 
has been deallocated. Consequently, there may arise such situation that the process 
B tries to make access to the resource Y on the basis of the address information 
contained in the identifier of the process B. However, because the identifier 
contains not only the address information but also the generation identifying 
information and because the generation identifying information is different between 
the identifier assigned to the resource X and the identifier assigned to the 
resource Y, the process B trying to make access to the resource Y with its own 
identifier can not access the resource Y. In this manner, the illegal access can be 
positively inhibited or disabled. 

Detailed Description Text (93) : 

Upon starting-up of the system, a 32-bit system clock is generated for holding the 
time as lapsed on a 10-. mu. second basis. 

Detailed Description Text (94): 

When a resource is created, the value of the system clock is fetched as the 
generation identifying information which is then stored at a leading address of the 
resource. An identifier of 64 bits is created which is composed of 32 MSB (more 
significant bits) corresponding to the address of the resource and 32 LSB (less 
significant bits) corresponding to the generation identifying information. 

Detailed Description Text (95) : 

For making access to the resource, the generation identifying information is 
extracted from the identifier transferred as the argument of the system call from 
the user application to the operating system, wherein the extracted generation 
identifying information is compared with the generation identifying information 
stored at the leading or starting address of the resource. When this comparison 
results in coincidence, the access to the resource is enabled, i.e., allowed. On 
the contrary, when the comparison shows discrepancy, the access to the resource is 
disabled or inhibited with an error message being returned. 

Detailed Description Text (97) : 
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When the system is activated, a single 32-bit counter is generated in the system 
for counting the number of times which resources are generated, and an initial 
value M 0" is inputted to the counter as the generation identifying information. 

Detailed Description Text (98) : 

Upon creation of a resource, the above-mentioned generation identifying information 
is incremented by one and stored at the starting or leading address of the 
resource. Subsequently, a 64-bit identifier is created which includes more 
significant 32 bits corresponding to the address of the resource and less 
significant 32 bits corresponding to the generation identifying information. 

Detailed Description Text (103) : 

When the processings 1302 and 1306 shown in FIG. 7 are executed for carrying out 
the shared resource access processing, processing illustrated in FIG. 23 is 
executed for validating the access to the shared resource. At first, before making 
access to the shared resource, the generation identifying information (602 in FIG. 
17A) stored in the identifier is compared with the generation identifying 
information (609 in FIG. 17A) of the shared resource (step 2702 in FIG. 23) . 

Detailed Description Text (104) : 

When coincidence is found between both the generation identifying information, it 
is then decided that the identifier of the shared resource is valid, i.e., the 
resource address (601 in FIG. 17A) contained in the identifier is valid. 
Accordingly, access is made to the shared resource by using the resource address to 
perform the processing for the shared resource. 

Detailed Description Text (105) : 

On the contrary, when discrepancy is found between both the generation identifying 
information mentioned above, this means that the identifier of the shared resource 
is invalid. More specifically, assuming, by way of example, that discrepancy of the 
generation identifying information occurs in the processing step 1306 shown in FIG. 
7, this means that the shared resource is deallocated for some reason during the 
preempt-enable interval intervening between the release of the preempt disabled- 
state (step 1303 in FIG. 7) in succession to the completion of the processing 1302 
shown in FIG. 7 and the next preempt disabling (step 1305 in FIG. 7) . Thus, the 
address of the resource (shared resource) as contained in the identifier is 
invalid. Consequently, the access to the shared resource is suspended and an error 
processing (step 2703 in FIG. 23) is carried out. In the error processing, the 
preempt disabling or inhibition and/or abort disabling may be cleared as occasion 
requires . 
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DOCUMENT- IDENTIFIER: US 6253225 Bl 

TITLE: Process executing method and resource accessing method in computer system 



Abstract Text (1) : 

A process executing method capable of performing multiprocessing by using a shared 
resource without impairing periodical drivability of processes designed for 
executing continuous media processing. When a process requests the use of the 
shared resource, abortion of that process is first disabled by the process itself 
by using an abort disable function and then preemption of the same process is 
disabled by means of a preempt control module, whereupon the process enters a 
processing executed by using the shared resource. Upon completion of the processing 
for the shared resource, the process is immediately set to a preempt ^enabled state 
by means of a preempt control module. After completion of all the processings, the 
abort -disabled state is finally cleared by using a disabled-abort clear function. 
Upon occurrence of forcive termination of a process in the abort -disabled state 
thereof, execution of this process is continued until the abort -disabled state is 
cleared, and the process is terminated forcibly after the abort -disabled state has 
been cleared. 

Brief Summary Text (7) : 

On the other hand, the operating system providing the multiprocessing environment 
is imparted with a function for protecting the resource allocated to a given 
process against the illegal access attempted by any other process. This function is 
referred to as the access right control or manage function. The access right 
control or management now under consideration is based on the presumption that the 
access right can be set on a process-by-process basis and that a plurality of 
processes may simultaneously try to access a computer resource. An interface for 
allowing a user application to call the functions of the operating system is 
ordinarily provided and known as "system call " . In this conjunction, it is noted 
that when a pointer is used as an argument of the system call, designation of an 
illegal address by the user application may unfavorably lead to destruction of 
important data resident in the operating system. To avoid such unwanted situation, 
an identifier is used as the argument in place of the pointer in typical one of the 
access right control or management. 

Brief Summary Text (8) : 

In the case of the access right control method in which the identifier is used as 
the argument in the system call issued by the user application, the operating 
system is required to translate the identifier to an address in the resource for 
making access to the resource. In this context, the simplest one of the translation 
methods is a method in which the hash function is employed. According to this 
method, an identifier is placed in or assigned to the hash function as a key, 
whereon the hash value as obtained is used as the address. The access right control 
method relying on the hash function will be described below. 

Brief Summary Text (10) : 

As is shown in FIG. 1, the operating system assigns a resource identifier 100 to 
the hash function (F) 101 as a key to acquire as the hash value an index "Index" 
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102 contained in a resource management data table 104. As is shown in FIG. 2A, 
resource management data 105 stored in the resource management data table 104 
contains an identifier 201, a pointer 205 to a resource 103, a flag 202 indicating 
presence or absence of a succeeding or next resource management data 106, a pointer 
203 to the succeeding resource management data 106, and a pointer 204 to process 
management data 107. 

Brief Summary Text (11) : 

There may arise such situation that the hash function returns a same index "Index" 
for different identifiers RID. In that case, collision between the indexes "index" 
will occur. Accordingly, the second resource management data 106 et seq. are stored 
in an overflow area with the address of the second or succeeding resource 
management data 106 being placed in the immediately preceding resource management 
data 105. 

Brief Summary Text (12): 

In case the resource is a shared resource, there exist a plurality of processes 
having respective access rights for the same identifier RID. In that case, the 
pointers to the second process identifier data 108 et seq. are placed in the 
immediately preceding process management data 107. 

Brief Summary Text (13) : 

The resource management data 105 is shown in FIG. 2A while the process management 
data 107 is shown in FIG. 2B. As can be seen in FIG. 2B, the process management 
data 107 is composed of a process identifier 207, a flag 208 indicating presence or 
absence of the next process management data, and a pointer 209 to the next process 
management data. At the end of the user application, it becomes necessary to know 
the identifier of the process having the access right in order to deallocate the 
resource occupied by the process. Thus, the operating system is provided with a 
process-specific resource identifier list 109 in which a resource identifier 110 is 
entered every time when a corresponding resource is generated or every time the 
access right to the shared resource is acquired. 

Brief Summary Text (16) : 

When the system call requesting the resource allocation is issued to the operating 
system by a user application, the operating system responds thereto by allocating 
the resource (step 1000) . Subsequently, the operating system acquires an identifier 
RIDx definite in the system (step 1001) and places the identifier RIDx to the hash 
function as a key. Thus, the index "Index" contained in the resource management 
data table 104, i.e., the address where the resource management data x is stored is 
obtained (step 1002) . In the case where the resource management data y has already 
been placed at the leading location of the area designated by the index, i.e., when 
collision between the indexes occurs (step 1003), the pointers are followed up from 
one to another (step 1005) so long as the flag 202 indicating presence or absence 
of the identifier management data 105 assumes a value "ON" (indicating the presence 
of the resource management data 105) (step 1004). When the resource management data 
z for which the flag 202 indicating the presence or absence of the succeeding 
identifier management data is set to "OFF" is found in the course of following or 
tracing the pointers, then the succeeding identifier management data 
presence/absence flag 202 is set to "ON" (step 1006) . Subsequently, an area for the 
new resource management data x is allocated to the overflow area (step 1007), 
whereupon the pointer 203 to the immediately preceding resource management data 
contained in the resource management data y is placed at the address of the 
resource management data x (step 1008) . When it is found in step 1003 that the 
succeeding identifier management data is not stored, the area for the resource 
management data x is assigned to the main area (step 1009) . 

Brief Summary Text (17): 

The process management data 107 is placed in the process management area and the 
process identifier is stored therein (step 1010) . At the same time, the identifier 
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RIDx 207 is stored in the process-specific identifier list 109 (step 1011) . The 
identifier RIDx 201, the pointer 204 to the process management data and the 
resource pointer 205 contained in the resource management data x 105 are assigned 
with respective values, whereon the flag 202 indicating the presence or absence of 
the succeeding resource management data is set to "OFF" state (step 1012) . Then, 
the identifier RIDx is returned to the user application (step 1013) . 

Brief Summary Text (19) : 

When the system call indicating a resource access request is issued by the user 
application to the operating system, the latter executes the processing illustrated 
in FIG. 4. 

Brief Summary Text (20) : 

The operating system assigns the identifier RIDx which is the argument of the 
system call to the hash function to obtain the index of the resource management 
data 105 (step 1100) . Subsequently, the identifier RID contained in the resource 
management data 105 located at the index is compared with the argument RIDx (step 
1101) . When the values of the identifier RID and the argument RIDx differ from each 
other and when the flag 202 indicating the presence or absence of the succeeding 
resource management data in the resource management data 105 is set "ON", i.e., 
when the succeeding resource management data 105 exists (step 1102), the pointer 
203 is followed up to the succeeding resource management data (step 1103), wherein 
the comparison between the identifier and the argument mentioned above is again 
performed (step 1101) . In the case where the identifiers RID of all the resource 
management data 105 which can be followed with the pointers do not coincide with 
the argument RIDx, it is then decided that the resource as requested does not exist 
in the system whereupon an error message is returned to the user application (step 

1104) . On the other hand, when coincidence is found between the identifier RID 
contained in the resource management data 105 and the argument RIDx in the 
comparison step 1101, then the process identifier PIDx of the process accessing 
currently the resource is compared with the process identifier PID 207 contained in 
the process management data 107 (step 1105) . When it is found in step 1105 that the 
values of both the identifiers differ from each other and when the flag 208 
contained in the process management data 107 and indicating the presence or absence 
of the succeeding process management data is "ON" (indicating that the succeeding 
process management data 107 exists) (step 1106), the succeeding pointer 209 is 
followed to reach the succeeding process management data (step 1107), whereon the 
comparison of the process identifiers mentioned above is again performed (step 

1105) . When the process identifiers PID contained in all the resource management 
data 105 which can be followed with the aid of the pointers do not coincide with 
tne argument PIDx, it is then decided that the user application issuing the system 
call has no access right to the resource, wherein an error message is returned to 
the user application (step 1108). 

Brief Summary Text (21): 

On the other hand, when the coincidence is found between the process identifier and 
the argument in step 1105, access to the resource is performed by using the 
resource address stored in the resource pointer 205 contained in the resource 
management data 105 (step 1109) . 

Brief Summary Text (23) : 

In the case where a system call requesting the deallocation of the resource is 
issued to the operating system from the user application, then the resource 
deallocation processing is performed for that resource. Additionally, when 
deallocation of the resources becomes necessary due to abnormal termination of a 
process, then the resource deallocation processing is performed for the resources 
corresponding to all the identifiers contained in the identifier list specific to 
the process terminated abnormally. The resource deallocation processing will be 
described below by reference to FIG. 5. In the first place, the operating system 
inhibits or block the access to all the resources (step 1200) and places the 
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identifier RIDx of the resource to be deallocated in the hash function as a key to 
obtain the index "Index" of the resource management data 105 (step 1201) . 
Subsequently, the identifier RID contained in the resource management data 105 
stored in the area indicated by the index is compared with the key or identifier 
RIDx (step 1202) . When the values of both the identifiers differ from each other 
and when the flag 202 indicating the presence or absence of the succeeding resource 
management data is "ON", i.e., when the succeeding resource management data 105 
exists (step 1203), the pointer 203 is followed up to the succeeding resource 
management data (step 1204), whereon the identifier comparison mentioned above is 
again repeated (step 1202) , In case the identifiers RID of all the resource 
management data 105 which can be followed with the pointers do not coincide with 
the key or identifier RIDx, it is then decided that the resource as requested does 
not exist, whereupon an error message is returned to the user application (step 
1205) . 

Brief Summary Text (24): 

On the other hand, when coincidence between both the identifiers RID and RIDx is 
found in the step 1202, the address of the process management data 107 stored in 
the pointer 204 to the process management data is acquired (step 1206) . When the 
succeeding resource management data 105 exists (step 1207), the resource management 
data 105 specified by the identifier RIDx is released or unlocked (step 1209) after 
changing the string of the pointers 203 to the resource management data (step 
1208). Subsequently, the pointer acquired in step 1206 is followed and it is 
checked whether or not the flag contained in the process management data 107 and 
indicating the presence or absence of the succeeding process management data is 
"ON" (step 1210) . If the flag is "ON", the pointer 209 to the succeeding process 
management data is acquired (step 1211), whereupon a message indicating that the 
process management data 107 is released or deallocated and that the identifier RID 
can no more used is issued to the user applications, i.e., individual processes 
(step 1212) . On the other hand, when it is dedicated in step 1210 that the flag 208 
indicating the presence or absence of the succeeding resource management data is 
"OFF", the final process management data 107 is released or deallocated, wherein 
the message indicating that the identifier RID can no longer be used is issued to 
the user application (step 1213), which is then followed by the reopening of the 
access to all the resources (step 1214). 

Brief Summary Text (25) : 

In conjunction with the method described above, it is noted that even when the 
index "Index" contained in the resource management data table 104 can be obtained 
by assigning an illegal identifier RIDz to the hash function as the key, the 
illegal identifier RIDz can not be found in the resource management data 105 which 
can be followed or traced with the index. Consequently, no resource address can be 
obtained, rendering the access impossible. Further, even if the illegal identifier 
RIDz should be contained accidentally in the resource management data 105 traced 
with the index, the identifier of the process making access to the resource is not 
stored in the process management data 107. Consequently, the address of the 
resource can not be gained. Thus, illegal access can be inhibited or disabled . 

Brief Summary Text (26) : 

Furthermore, in the resource unlock processing, the resource protection can be 
realized by inhibiting or disabling all the accesses of the user applications to 
the resource, while illegal access after the resource deallocating can be inhibited 
by invalidating the identifier, releasing the resource management data and the 
process management data which can be traced with the index and issuing the message 
informing the processes of the deallocating of the resource. 

Brief Summary Text (31) : 

Under the circumstances, in the system designed for performing the continuous media 
processing, there is conceivable a method of structuring a computer system without 
using any lock at all from the beginning in order to evade the priority inversion 
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problem. As a method of realizing the exclusive control or mutually exclusive 
management of the process, such process control or management method may be 
conceived in which the process using currently the shared resource is allowed to 
occupy exclusively the CPU (Central Processing Unit) or, to say in another way, any 
other process is inhibited or disabled from being scheduled so long as the shared 
resource is being used by a given one of the processes. Such control or managing 
method can be realized by adopting a preempt control method proposed in Japanese 
Patent Application No. 8-97997. Parenthetically, the preempt control method 
concerns prevention of a process being executed from being temporarily suspended 
(i.e., preempted) by providing interfaces "preempt disabling" and "disabled-preempt 
releasing or clearing", wherein during a period intervening between a time point at 
which the preempt disabling is validated and a time point at which the preempt 
disabling is cleared (this period may also be referred to as the preempt -disabled 
interval), the process in execution is prevented from being preempted and thus can 
continue the execution even when a scheduling request is issued from any other 
process. By virtue of such control, it can be ensured that no more than one process 
can use the shared resource at any time. In other words, the exclusive control or 
management of the processes can thus be realized. 

Brief Summary Text (34): 

When the processing mentioned above is to be realized only by setting the preempt- 
disabled interval, it is then necessary to set the preempt -disabled interval so 
that it extends from a time point "preceding to contacting the free list" to a time 
point at which "the resource has been chained to the resource allocation list". To 
this end, processings (la) to (5a) mentioned below will have to be carried out. 

Brief Summary Text (35) : 

(la) Setting the preempt -disabled state. 

Brief Summary Text (39) : 

(5a) Clearing the preempt -disabled state as set. 
Brief Summary Text (40) : 

At this juncture, it is noted that the time taken for initialization of the 
resource is not always short. In fact, time in the order of several ten 
milliseconds is taken solely for the initialization of a memory upon memory 
allocation internally of the operating system. Accordingly, when the mutually 
exclusive control is to be realized only by setting the preempt -disabled interval, 
as mentioned above, there may arise such situation that a given one process 
occupies the CPU for an extended time, which will result in degradation in the 
response performance on the real-time basis, eventually exerting adverse influence 
to the periodical drivability of the continuous media processing. 

Brief Summary Text (42): 

(lb) Setting the preempt -disabled state. 
Brief Summary Text (44): 

(3b) Clearing the preempt -disabled state as set. 
Brief Summary Text (46): 

(5b) Setting the preempt -disabled state. 
Brief Summary Text (48) : 

(7b) Clearing the preempt -disabled state as set. 
Brief Summary Text (49): 

The above processings can certainly satisfy the necessary condition from the view 
point of the mutual exclusive control or management. Besides, the duration of the 
preempt -disabled interval can be reduced to ca. 10 .mu.sec, while in the resource 
initialization processing (4b), the right of using the CPU can be transferred to 
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other process. Thus, the real-time response performance of the system can be 
improved. Unfavorably, however, there may arise a problem when the process 
executing the resource initialize processing (4b) is externally forced to terminate 
in the course of executing this processing. 

Brief Summary Text (50) : 

In general, most of computer systems are equipped with a function for stopping 
externally process execution for coping with overrunning of a program. Accordingly, 
when the process executing the processings mentioned above is forced to terminate 
by other process by resorting to the forcive terminate function mentioned above, 
then the resource initialized by the processing (4b) may become a free resource 
belonging to none of the management lists. As the result of this, such situation 
may arise in which the operating system can not recover the resource when the 
process is terminated, which in turn means that the resource used by the process 
terminated forcibly becomes unusable for ever. In order to evade this problem, 
there may be conceived a method of initializing the resource in the state where the 
resource is chained to the free list or the resource allocation list. In that case, 
however, the duration of the preempt ^disabled interval period is substantially 
equal to that of the preempt ^disabled period covering the whole processings 
described hereinbefore. As another method, it is equally conceivable to prepare 
separately a list for managing the resources under initialization, wherein the 
resource undergoing the processing (4b) is chained to this list. However, this 
method is disadvantageous in that overhead involved in the initialization 
processing increases because of an increased number of times the list-chain 
changing processing has to be performed. 

Brief Summary Text (53) : 

According to the teaching of the invention, it is declared by the process in 
precedence to the use of the shared resource that the process is not forcibly 
terminated. Parenthetically, in the description which follows, expression "process 
is not aborted" or the like is used, which means that the process is not forcibly 
terminated, and prevention of the process from being forcibly terminated is 
expressed as "abort disabling " or the like. Thus, "the state in which a process is 
prevented from being aborted" may be expressed as "abort -disabled state" or the 
like. Additionally, the process is " preempt ^disabled " , which mean that the process 
is protected against interruption or suspension of the processing or task executed 
by that process. At the end of the use of the shared resource, the process is 
cleared from the preempt -disabled state. Upon completion of all the processings for 
the shared resource, it is declared by the process that it may be forcibly 
terminated, which is expressed as "clearing the process from the abort -disabled 
state" or simply as "clearing of the abort -disabled state" or so. Further, the time 
period or interval intervening between the abort -disable declaration and the abort- 
disabled state clearing declaration is called "abort -disabled interval". When a 
request for the forcive termination of a process is issued during the abort^ 
disabled period or interval, execution of the process is continued until the 
processing to be executed during the abort -disabled period has been completed. When 
the abort -disabled state is cleared, the process is forcibly terminated. 

Brief Summary Text (54): 

In a preferred mode for carrying out the invention, a sole process dedicated for 
coping with such situation that the shared resource is used by a process over a 
prolonged duration is provided in the system. Further, for sending the requests for 
using the shared resource to the sole process, there is provided a queue. The other 
process destined for performing the continuous media processing issues a shared 
resource use request to the sole dedicated process before starting the periodical 
driving, and upon completion of the processing for the shared resource, the 
periodical driving is validated. The request mentioned above is registered in the 
queue. Provision of such dedicated process can ensure that it is always only one 
process in the system that can perform the processing for the shared resource. 
Thus, the processing for the shared resource can be effectuated in the preempt- 



l 



h eb bgeeefc e h 



e ge 



Record Display Form 



Page 7 of 18 



enabled state, which in turn means that the processing for the shared resource can 
be executed in parallel with the periodically driven process or processes. 

Brief Summary Text (56) : 

On the other hand, in the case of the method according to which the identifier is 
placed in or assigned to the hash function as a key to determine the index "Index" 
of the resource management data containing the address of the resource for making 
access to the resource, there arise problems mentioned below in executing such 
processing which has to process a large amount of data at a high speed on a real- 
time basis while allocating a CPU time at every predetermined interval as in the 
case of the multi-media data processing. 

Brief Summary Text (57) : 

(1) When a plurality of processes make simultaneous access to one data, collision 
of the hash values will take place in the accessing method using the hash function, 
which makes it necessary to search the overflow area while following pointers until 
the identifier of the resource as searched is found. 

Brief Summary Text (58) : 

Further, when the identifier is found, it is necessary to search the process 
management data by following with the pointers until the process identifier is 
found in order to check whether or not the process attempting to make access to the 
shared resource has really the access right (i.e., the right of accessing the 
resource) . Consequently, overhead involved in the processing increases considerably 
while the time taken for the memory access becomes too long to be useful for 
effective reproduction of the data. 

Brief Summary Text (59) : 

(2) In the system in which the user application unlocks the resource, the operating 
system has to follow or trace the pointers of all the process management data in 
order to acquire the identifier of the process using the resource and release the 
process management data as found while messaging to the individual processes that 
the resource can not be used. During the period for the search mentioned above and 
for the execution of succeeding processings, all the accesses from the user 
applications to the resource are disabled or inhibited. Consequently, in the case 
where the resource deallocation processing takes place and in the system in which 
there exist a plurality of processes to be processed on a real time basis, overhead 
involved in searching the processes sharing the resource to be deallocated and 
executing the succeeding deallocation processing will increase considerably. In 
that case, the real-time processing is very difficult to realize or rendered 
impossible . 

Brief Summary Text (60): 

In the light of the foregoing, it is a second object of the present invention to 
provide an accessing method which is capable of reducing the overhead involved in 
the translation between the identifier and the address while sustaining the access 
right control function of the conventional method and decreasing the time or period 
during which the access to the shared resource for executing the process 
terminating processing is disabled . 

Brief Summary Text (61) : 

For achieving the above and other objects which will become apparent as description 
proceeds, it is taught according to an aspect of the present invention that an 
identifier composed of address information and generation identifying information 
of a resource is assigned to a resource upon generation thereof and at the same 
time the generation identifying information is stored at a leading location of the 
resource . The generation identifying information is extracted from an identifier 
transferred as an argument of a system call issued by a user application upon 
making access to the resource. The extracted generation identifying information is 
compared with the generation identifying information stored in the resource at the 
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leading location thereof. Access to the resource is enabled when coincidence is 
found between both the generation identifying information while disabled when 
discrepancy is found between both the generation identifying information. In this 
way, the access right to the resource can be controlled solely by comparing both 
the generation identifying information. 

Drawing Description Text (11) : 

FIG. 8 is a flow chart illustrating a processing procedure of an abort disable 
function (21) shown in FIG. 6; 

Drawing Description Text (12) : 

FIG. 9 is a flow chart illustrating a processing procedure of a preempt disabling 
function (32) shown in FIG. 6; 

Drawing Description Text (13) : 

FIG. 10 is a flow chart illustrating a processing procedure of a disabled-preempt 
clear function (33) shown in FIG. 6; 

Drawing Description Text (14): 

FIG. 11 is a flow chart illustrating a processing procedure of a disabled-abort 
clear function (22) shown in FIG. 6; 

Drawing Description Text (25) : 

FIG. 22 is a flow chart for illustrating a identifier creating (make__id) 
processing; 

Detailed Description Text (4) : 

In the figure, reference numeral 10 denotes a process management table 10 for 
controlling or managing processes. In the process management table 10, there are 
held an abort request flag 11, an abort -disabled flag 12, a counter 13 for counting 
abort disablings nested. Further, reference numeral 20 denotes a process management 
module for controlling or managing processes, 21 designates an interface function 
for setting the abort disabling, 22 denotes an interface function for clearing the 
abort disabling, and 200 denotes a process which requires the processing for a 
shared resource. Furthermore, reference numeral 40 denotes a function which uses a 
shared resource provided in the process 200 and which holds work areas 23 and 37. 
Additionally, reference numeral 30 denotes a preempt control module which is based 
on the teaching of the invention disclosed in Japanese Patent Application No. 8- 
97997. More specifically, the preempt control module 30 includes a scheduler 31, a 
preempt disable function 32, a disabled-preempt clear function 33, a scheduling 
request flag 34, a preempt -disabled flag 35 and a counter 36 for counting the 
preempt disablings nested. 

Detailed Description Text (5) : 

FIG. 7 is a flow chart for illustrating a flow of controls for the abort disabling 
and the preempt disabling in a process for realizing a feature of the present 
invention. When processing relating to the shared resource is to be executed, the 
function 40 included in the process 200 destined for executing the above-mentioned 
processing initially inhibits its own process from being aborted by using the abort 
disable function 21 (step 1300) . Immediately before using the shared resource, the 
function 4 0 inhibits its own process from being preempted by using the preempt 
disable function 32 held in the preempt control module 30 (step 1301), wherein the 
processing which makes use of the shared resource is executed (step 1302) . Upon 
completion of the processing for the shared resource, the disabled preempt is 
instantaneously released or cleared with the aid of the disabled-preempt clear 
function 33 held in the preempt control module 30 (step 1303) . At this juncture, it 
should be mentioned that setting of the preempt -disabled interval (or preempt^ 
disabled section in light of the control flow) extending from the preempt disabling 
to the disabled-preempt clearing (corresponding to the section extending from step 
1301 to step 1303) is limited to such processing for the shared resource which is 
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terminated within a time exerting no adverse influence to the periodical driving 
performance, e.g. a time not longer than 10% of a minimum time required for 
managing the periodical driving. During a period preceding to the subsequent 
declaration of the preempt disabling, there prevails a preempt -enabled state where 
processings require relatively a lot of time such as initialization for the 
allocated resource or the like is executed (step 1304) . During this period, 
execution of the process 200 may be temporarily interrupted (or suspended) while 
allowing other processes to be scheduled. When the processing for the shared 
resource becomes necessary again, the process 200 sets itself once more to the 
preempt -disabled state (step 1305) . When the processing for the shared resource 
(step 1306) comes to an end, the preempt disabling is released or cleared (step 

1307) . Upon completion of all the processings, the abort disabling is cleared 
finally by resorting to the use of the disabled-abort clear function 22 (step 

1308) . 

Detailed Description Text (6) : 

In the case of the example illustrated in FIG. 7, the preempt -disabled interval 
makes appearance twice during the period extending from the abort disabling to the 
disabled-abort clearing. In actual applications, the number of such preempt- 
disabled intervals may be more than three inclusive thereof. 

Detailed Description Text (7) : 

FIG. 8 is a flow chart illustrating in detail an internal processing of the abort 
disabling procedure (1300) mentioned above by reference to FIG. 7. Execution of the 
processing shown in FIG. 8 is effectuated by using the abort disable function 21. 
To this end, the abort disable function 21 checks at first whether the abort- 
disabled flag 12 held in the process management table 10 managing the process 200 
is in the OFF-state or not (step 1400). When the abort -disabled flag 12 is OFF, 
then the abort disable function 21 sets the abort -disabled flag 12 to the ON-state 
(step 1401) . Subsequently, the abort disable function 21 increments the value of 
the counter 13 by one (step 1402) . The procedure shown in FIG. 8 is indivisible in 
execution thereof. 

Detailed Description Text (8) : 

FIG. 9 is a flow chart illustrating in detail internal processing of the preempt 
disabling procedure (1301, 1305) mentioned above by reference to FIG. 7. The 
processing shown in FIG. 9 is executed by means of the preempt disable function 32 
shown in FIG. 6. At first, the preempt disable function 32 checks whether the 
preempt -disabled flag 35 held in the preempt control module 30 is in the OFF-state 
or not (step 1500) . When the preempt -disabled flag 35 is OFF, then the preempt 
disable function 32 sets the preempt -disabled flag 35 to the ON-state (step 1501). 
Subsequently, the preempt disable function 32 increments the value of the counter 
36 by one (step 1502) . The whole procedure shown in FIG. 9 is executed indivisibly. 



Detailed Description Text (9) : 

FIG. 10 is a flow chart illustrating in detail internal processing of the disabled- 
preempt clearing procedure (1303, 1307) mentioned above by reference to FIG. 7, 
Execution of the processing shown in FIG. 10 is in charge of the disabled-preempt 
clear function 33 shown in FIG. 6. At first, the disabled-preempt clear function 33 
checks whether or not the nest value (described hereinafter) of the function 
transferred as the first argument coincides with the value of the counter 36 (step 
1600). Unless coincidence is found, then an abnormality processing is carried out. 
On the other hand, when the coincidence is found, the value of the counter 36 
incorporated in the preempt control module 30 is decremented by one (step 1601) . 
When the value of the counter 36 resulting from the decrementation is positive 
(plus), then the processing is terminated intact (step 1602). On the contrary, in 
case the value of the counter 36 is zero or negative (minus), the preempt -disabled 
flag is set to the OFF-state (step 1603) . Subsequently, the scheduling request flag 
34 held internally of the preempt control module 30 is checked (step 1604). When 
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this flag is OFF, then the processing is terminated. On the other hand, when the 
scheduling request flag 34 is in the ON-state, the scheduler 31 is activated (step 
1605) to thereby validate the execution of the scheduling processing for the 
process . 

Detailed Description Text (10) : 

FIG. 11 is a flow chart illustrating in detail internal processing of the disabled- 
abort clearing procedure (1308) mentioned above by reference to FIG. 7. The 
processing shown in FIG. 11 is executed with the aid of the disabled-abort clear 
function 22 shown in FIG. 6. At first, the disabled-abort clear function 22 checks 
whether or not the nest value (described hereinafter) of the function transferred 
as the first argument coincides with the value of the counter 13 (step 1700) . 
Unless coincidence is found, then an abnormality processing is performed. On the 
other hand, when coincidence is confirmed, the value of the counter 13 incorporated 
in the process management table 10 managing the process 200 is decremented by one 
(step 1701) . When the value of the counter 13 resulting from the decrementation is 
positive (plus), the processing is terminated intact (step 1702). By contrast, in 
case the value of the counter 13 is zero or negative (minus) , the abort -disabled 
flag is set to the OFF-state (step 1703) . Subsequently, the abort request flag 11 
held internally of the process management table 10 is checked (step 1704). When 
this flag is OFF, then the processing is terminated. On the other hand, when the 
abort request flag 11 is ON, the process management module 20 is activated (step 
1705) to thereby validate the execution of the abort processing for the process 
200. 

Detailed Description Text (12): 

Referring to FIG. 6, the interval or period during which the abort -disabled flag 12 
remains in the ON-state, i.e., the period from a time point at which the abort 
disable function 21 is called to set the abort -disabled flag 12 to the ON-state to 
a time point at which the disabled-abort clear function 22 is called to set the 
abort -disabled flag 12 to the OFF-state represents the abort -disabled interval. The 
abort -disabled flag 12 is in the OFF-state when the process is created or generated 
and set to the ON-state only when the abort disable function 21 is called. In case 
the forcive termination of the process 200 occurs during the abort -disabled 
interval during which the abort -disabled flag 12 remains in the ON-state as set by 
the abort disable function 21 called by the process 200, the process management 
module 20 executes only the processing for setting the abort request flag 11 to the 
ON-state while allowing the processing of the process 200 to be continued. The 
forcive termination of the process 200 is validated when the abort -disabled flag 12 
is set to the OFF-state by the disabled- abort clear function 22 called by the 
process 200. 

Detailed Description Text (13) : 

Further, referring to FIG. 6, the interval or period during which the preempt- 
disabled flag 35 remains in the ON-state, i.e., the period extending from a time 
point at which the preempt disable function 32 is called to set the preempt^ 
disabled flag 35 to the ON-state to a time point at which the disabled-preempt 
clear function 33 is called to set the preempt ^disabled flag 35 to the OFF-state 
represents the preempt -disabled interval. The preempt -disabled flag 35 is in the 
OFF-state when the system is activated and set to the ON-state only when the 
preempt disable function 32 is called. In case the scheduling request for the other 
process (es) occurs during the interval in which the preempt -disabled flag 35 
remains in the ON-state as set by the preempt disable function 32 called by the 
process 200, the scheduler 31 executes only the processing for setting the 
scheduling request flag 34 to the ON-state while allowing the processing of the 
process 200 to be continued without scheduling the other process (es). When the 
preempt -disabled flag 35 is set to the OFF-state by the disabled-preempt clear 
function 33 called by the process 200, the scheduler 31 sets the scheduling request 
flag to the OFF-state and suspends the execution of the process 200 while allowing 
other processes to be scheduled. 
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Detailed Description Text (14): 

Referring to FIG. 7, in the interval or section extending from step 1301 to step 
1303 and in the interval or section extending from step 1305 to step 1307, the 
preemption is disabled, which in turn means that the right of using the CPU 
(Central Processing Unit) is never transferred to other process. Thus, it is only 
the running process that can use the shared resource. In other words, any other 
process is inhibited from using the shared resource, whereby the exclusive control 
or management of the resource can be realized, which makes it possible to perform 
the continuous media multiprocessing using the shared resource. Additionally, 
because abortion is disabled during the interval spanning over steps 1300 to 1308, 
any process acquired the resource is caused to vanish due to the forcive 
termination. Thus, the resource is positively prevented from falling in such state 
that it can not be utilized for an indefinite period. 

Detailed Description Text (15) : 

The abort disabling as well as the disabled-abort clearing is effectuated through 
the medium of interfaces mentioned below, respectively. 

Detailed Description Text (17) : 
abort _disable ( *level) 

Detailed Description Text (19) : 

level: the depth of the nest formed by a pair of the instant function now under 
consideration and the function "abort enable " is returned. 

Detailed Description Text (21) : 

The function now of concern can make the currently executed process transit to the 
abort -disabled state. This function and the function "abort enable " may be issued 
in a pair during the section or period spanning over the transition to the abort^ 
disabled state in response to the issuance of this function and the restoration to 
the abort -enabled state in response to the issuance of the function "abort enable " . 
This means that the pair of the function now of concern and the function 
"abort enable " can be nested. The function now of concern and the function 
"abort enable " issued internally of the nest make no state transition between the 
abort -disabled state and the abort -enabled state. The argument "level" reflects the 
depth of such nested state. 

Detailed Description Text (23): 
abort _enable ( level ) 

Detailed Description Text (25) : 

level: the level of the nest returned from the function "abort di sable " which 
constitutes the counterpart to be paired with the instant function is designated. 

Detailed Description Text (27) : 

The function of concern can make the currently executed process be restored to the 
abort -enabled state. The function now of concern (i.e., "abort enable " ) and the 
function "abort disable " may be issued in a pair during the section or period 
spanning over the transition to the abort -disabled state in response to the 
issuance of the function "abort disable " and the restoration to the abort -enabled 
state in response to the issuance of the instant function. This means that the pair 
of the function "abort disable " and the function now of concern "abort enable " can 
be nested. The function "abort di sable " and the function now of concern issued 
internally of the nest make no state transition between the abort -disabled state 
and the abort -enabled state. The argument "level" designates or represents the 
depth of such nest, i.e., the value of "level" due to the issuance of the 
counterpart function "abort disable " . This value is held by the operating system as 
well. Thus, discrepancy of this value with the depth of the nest specified by the 
argument, the so-called error return takes place. 
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Detailed Description Text (28) : 

When the function 40 included in the process 200 uses the abort disable function 
21, the function 40 stores in its own work area 23 the current depth of the nest 
returned from the abort disable function 21. For issuing the disabled-abort clear 
function 22, the value stored in the work area 23 is designated or specified as the 
argument of the function 40. The disabled-abort clear function serves to compare 
the value mentioned above with the current depth of the nest to validate the error 
return unless coincidence is found between both the values mentioned above. By 
virtue of this function, it is possible to detect easily such a programming bug 
that the disabled-abort clear function which is to constitute the counterpart of 
the abort disable function in a pair, is absent. 

Detailed Description Text (29) : 

The preempt disable processing and the disabled-preempt clearing processing can be 
carried out by making use of the disabled-preempt clearing interface and the 
disabled-preempt clearing interface disclosed in Japanese Patent Application No. 8- 
97997 mentioned hereinbefore. Namely, the following interfaces are employed. 

Detailed Description Text (31) : 
preempt _di sable ( * level ) 

Detailed Description Text (33) : 

level: the depth of the nest formed by a pair of the instant function now of 
concern (i.e., "preempt _disable " ) and the function "preempt _enable " is returned. 

Detailed Description Text (35) : 

The function now of concern makes the currently executed process transit to the 
preempt -disabled state. This function "preempt disable " and the function 
"preempt _enable " may be issued in a pair during the section or interval intervening 
between the transition to the preempt -disabled state in response to the issuance of 
this function and the restoration to the preempt -enabled state in response to the 
issuance of the function "preempt enable " . This means that the pair of the function 
now of concern and the function "preempt _enable " can be nested. The function now of 
concern and the function "preempt enable " issued internally of the nest make no 
state transition between the preempt -disabled state and the preempt -enabled state. 
The argument "level" reflects the depth of such nest. 

Detailed Description Text (37) : 
preempt enable {level ) 

Detailed Description Text (39) : 

level: the level of the nest returned by the function "pre emp t _d i s abl e " which is to 
constitute a counterpart of the pair of the instant function is designated. 

Detailed Description Text (41) : 

The function of concern can make the currently executed process restore to the 
preempt -enabled state. The function "preempt disable " and this function may be 
issued in a pair during the interval or period spanning over the transition to the 
preempt -disabled state in response to the issuance of the function 
"preempt di sable " and the restoration to the preempt -enabled state in response to 
the issuance of this function. This means that the pair of the function 
"preempt di sable " and the function of concern can be nested. The function 
"preempt disable " and the function now of concern issued internally of the nest 
make no state transition between the preempt -disabled state and the preempt -enabled 
state. The argument "level" designates the depth of such nest, i.e., the value of 
"level" obtained due to the issuance of the counterpart function "preempt disable " . 
The depth of the nest is held by the operating system as well. Thus, discrepancy of 
this value with the depth of the nest specified by the argument, the so-called 
error return takes place. 
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Detailed Description Text (42) : 

When the function 40 included in the process 200 uses the preempt disable function 
32, the function 4 0 stores in its own work area 37 the current depth of the nest 
returned from the preempt disable function 32. For issuing the disabled-preempt 
clear function 33, the value stored in the work area 23 is designated or specified 
as the argument of the function 40. The disabled-preempt clear function serves to 
compare the value mentioned above with the current depth of the nest to thereby 
validate the error return unless coincidence is found between both the values 
mentioned above. By virtue of this function, such a programming bug can easily be 
detected that the disabled-preempt clear function which is to constitute the 
counterpart of the preempt disable function in a pair is absent. 

Detailed Description Text (53) : 

At this juncture, it should be mentioned that the serializer process 220 in the 
system shown in FIG. 12 operates constantly in the preempt -enabled state. 

Detailed Description Text (55) : 

By adopting the process executing method based on the serializer process described 
above, the exclusive control (i.e., mutual exclusion control or management) need 
not be performed because the process which can perform processing directly on or 
for the shared resource is only one, i.e., the serializer process. Thus, by virtue 
of the arrangement that the processing for the shared resource is performed by the 
preempt -enabled independent process dedicated to the processing for the shared 
resource, process execution can be accomplished without exerting any influence to 
the periodical driving performance (or periodical drivability) of other processes 
partaking in the continuous media processing. 

Detailed Description Text (60) : 

An resource identifier 600 shown in FIG. 17A is an argument of 64 bits contained in 
the system call issued by a user application for using the same in the access to 
the resource. Of the 64-bit argument, the leading 32 bits are used for identifying 
a starting or leading address 601 of a resource 608 while the trailing 32 bits 
constitute generation identifying information 602. The resource identifier 600 is 
generated upon creation of the resource and used for making access to the resource 
until the resource is released or deallocated. 

Detailed Description Text (61): 

A resource generation counter 603 shown in FIG. 17B is created for each of the 
processes upon generation thereof and serves as a counter for recording the number 
of times the resource is generated. The count value 604 of the resource generation 
counter 603 is set to the initial value of zero and incremented by one every time 
the resource is created. 

Detailed Description Text (62): 

Generation identifying information 605 shown in FIG. 17C contains leading 16 bits 
representing a count value 606 of the resource creation counter with the trailing 
16 bits representing a process identifier 607. 

Detailed Description Text (63): 

Hereinafter, the resource which contains the generation identifying information 609 
at a leading or starting location thereof will be referred to as the resource 608. 

Detailed Description Text (66): 

(1) In a step 2200, a user application issues a system call requesting a process 
generating processing to the operating system, which responds thereto by creating a 
resource generation counter 603 for the process as generated. 

Detailed Description Text (67) : 

(2) In a step 2201, the user application issues to the operating system a system 
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call for the resource allocation processing. 
Detailed Description Text (68) : 

(3) In a step 2202, the user application issues to the operating system a system 
call requesting an access processing to the resource allocated in the step 2201. 

Detailed Description Text (69) : 

(4) In a step 2203, the user application issues to the operating system a system 
call requesting an deallocation processing of the resource allocated in the step 
2201. 

Detailed Description Text (70) : 

In the following, the processing for each of the system calls mentioned above will 
be described in detail. 

Detailed Description Text (72) : 

FIG. 19 shows a flow chart for illustrating the resource allocation processing step 
2201 shown in FIG. 18. The resource generation counter is incremented by one (step 
2300 in FIG. 19), wherein generation identifying information creating or making 
processing "make_idinf" is executed (step 2301), which is then followed by step 
2302 in which a resource area allocation (or memory area acquisition) processing 
"alloc_mem" is executed and step 2303 of creating an identifier "make_id" is 
executed. Thereafter, the generation identifying information is stored at leading 
32 bits of the resource area as returned (step 2304). 

Detailed Description Text (74): 

FIG. 20 shows a flow chart for illustrating the generation identifying information 
creating processing in step 2301 shown in FIG. 19. Hereinafter, this processing 
will also be referred to as "make_idinf" processing. The generation identifying 
information is created by a pair of the resource generation counter value and the 
process identifier of the process destined for the resource generation . Referring 
to FIG. 20, the process identifier is first acquired (step 2400), wherein the 
resource generation counter value is placed in the leading 16 bits while a random 
number value as generated is stored in the trailing 16 bits, to thereby create or 
make the 32-bit generation identifying information (step 2401) . The generation 
identifying information as created is returned (step 2402) . 

Detailed Description Text (76) : 

FIG. 21 shows a flow chart for illustrating the resource acquisition (or 
allocation) processing in the step 2302 shown in FIG. 19. This processing will also 
be referred to as "alloc_mem" processing. Because the resource area is constituted 
by a generation identifying information area and a resource area, the resource area 
size added with the generation identifying information data size of 32 bits is 
determined (step 2500) , wherein the resource area of the size as determined is 
allocated (step 2501) . Thereafter, the leading address of the resource area (memory 
area) is returned (step 2502) . 

Detailed Description Text (77) : 

.sctn.2.1.3. Identifier Creating (make_id) Processing 
Detailed Description Text (78) : 

FIG. 22 shows a flow chart for illustrating the identifier creating processing in 
the step 2303 shown in FIG. 19. Hereinafter, this processing will also be referred 
to as "make_id" processing. The identifier is constituted by a pair of the resource 
address and the generation identifying information. The address of the resource 
acquired in resource area allocation or "alloc_mem" processing (step 2302) is 
placed at leading 32 bits while the generation identifying information created in 
the generation identifying information creating "make_id" processing (step 2301) is 
placed at the trailing 32 bits, to thereby create the identifier of 64 bits (step 
2600) . The identifier as created is returned as the argument for use in making 
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access to the resource (step 2601) . 
Detailed Description Text (80) : 

FIG. 23 shows a flow chart for illustrating a resource access processing 
corresponding to the step 2202 in FIG. 18. Referring to FIG. 23, the leading 32 
bits of the identifier received as the argument of the system call issued by the 
user application are extracted to thereby define the resource address while the 
trailing 32 bits are extracted for defining the generation identifying information 
SI (step 2700) . Subsequently, the leading 32 bits are read out from the resource on 
the basis of the resource address to define the generation identifying information 
S2, i.e., "read_mem" information (step 2701), wherein the generation identifying 
information SI and S2 as extracted are compared with each other (step 2702) . Unless 
the comparison results in coincidence, the access to the resource is not performed, 
and an error message is returned (step 2703) . On the other hand, when the above 
comparison results in coincidence, then the access processing to the resource is 
performed (step 2704). 

Detailed Description Text (83) : 

Similarly to the resource access processing (step 2202 shown in FIG. 18), in the 
resource deallocation processing (step 2203 shown in FIG. 18), the leading 32 bits 
of the identifier received as the argument of the system call issued by the user 
application are extracted to define the resource address while the trailing 32 bits 
are extracted for defining the generation identifying information SI (step 2800) . 
Subsequently, the leading 32 bits are read out from the resource to define the 
generation identifying information S2 "read_mem" processing (step 2801) . Then, the 
generation identifying information SI and S2 mentioned above are compared with each 
other (step 2802) . Unless the comparison results in coincidence, the resource is 
not deallocated and a corresponding error message is returned (step 2803) . On the 
other hand, when the above comparison results in coincidence, then the resource 
deallocation processing is performed (step 2804). 

Detailed Description Text (85) : 

(1) As is obvious from the description concerning the resource access processing 

( . sctn . 2 . 2 . ) , the address for accessing the resource is contained in the identifier 
which is the argument of the system call issued by the user application to the 
operating system. Thus, it is possible to make access to the resource by using the 
identifier in place of using the hash function for the translation between the 
identifier and the address. Consequently, overhead involved by the use of the hash 
function can be diminished. 

Detailed Description Text (86) : 

(2) Let's suppose that a process A and a process B share a resource and that the 
process A has issued a system call for deallocating the resource X. In that case, 
in the conventional system, the operating system searches the identifiers contained 
in the resource management data by following the pointers, starting from the index 
derived by using the hash function to thereby determine the address of the resource 
to be deallocated. Further, other processes sharing the resource X is searched to 
release all the process management data as found and issue a message indicating 
that the resource X is invalid. In the meantime, the operating system inhibits or 
disables all the accesses to the shared resource from the user applications. 

Detailed Description Text (87): 

By contrast, according to the methods of the invention, the address of the resource 
can be obtained for unlocking the resource without need for following the pointers 
for acguiring the address of the resource because the address has already been 
contained in the identifier of the resource X to be deallocated. Additionally, it 
is apparent from the previous description concerning the resource deallocation 
processing ( . sctn . 2 . 3 . ) , the operating system controls or manage the resource 
access right on the basis of only the result of comparison between the generation 
identifying information SI contained in the identifier assigned to the resource X 
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and the generation identifying information S2 stored in the leading of the resource 
X. Thus, the task imposed on the operating system is only the deallocation of the 
resource X, 

Detailed Description Text (88) : 

In this manner, the duration of the state in which the access to the resource is 
disabled and which makes appearance between the successive process completion 
processings can be reduced to only the time involved in deallocating the resource 
X. 

Detailed Description Text (89) : 

(3) In conjunction with the resource deallocation processing described above, it is 
again assumed that a process C generates a resource Y and allocates the created 
resource Y to the address having been allocated to the resource X in the state in 
which the resource X is deallocated or released. In that case, the operating system 
issues to the process B no information or message indicating that the resource X 
has been deallocated. Consequently, there may arise such situation that the process 
B tries to make access to the resource Y on the basis of the address information 
contained in the identifier of the process B. However, because the identifier 
contains not only the address information but also the generation identifying 
information and because the generation identifying information is different between 
the identifier assigned to the resource X and the identifier assigned to the 
resource Y, the process B trying to make access to the resource Y with its own 
identifier can not access the resource Y. In this manner, the illegal access can be 
positively inhibited or disabled . 

Detailed Description Text (94): 

When a resource is created, the value of the system clock is fetched as the 
generation identifying information which is then stored at a leading address of the 
resource. An identifier of 64 bits is created which is composed of 32 MSB (more 
significant bits) corresponding to the address of the resource and 32 LSB (less 
significant bits) corresponding to the generation identifying information. 

Detailed Description Text (95) : 

For making access to the resource, the generation identifying information is 
extracted from the identifier transferred as the argument of the system call from 
the user application to the operating system, wherein the extracted generation 
identifying information is compared with the generation identifying information 
stored at the leading or starting address of the resource. When this comparison 
results in coincidence, the access to the resource is enabled, i.e., allowed. On 
the contrary, when the comparison shows discrepancy, the access to the resource is 
disabled or inhibited with an error message being returned. 

Detailed Description Text (98): 

Upon creation of a resource, the above-mentioned generation identifying information 
is incremented by one and stored at the starting or leading address of the 
resource. Subsequently, a 64 -bit identifier is created which includes more 
significant 32 bits corresponding to the address of the resource and less 
significant 32 bits corresponding to the generation identifying information. 

Detailed Description Text (99) : 

For accessing the resource, the resource access processing is performed by using 
the identifier mentioned above similarly to the processing described in the 
section .sctn.3.1. 

Detailed Description Text (100) : 

Further, the resource accessing methods described above by reference to FIGS. 17A 
to 23 allow to structure a safe system which inhibits or disables the invalid 
access to the shared resource by applying the accessing method to the processing 
steps 1302 and 1306 shown in FIG. 7. This shared resource accessing method will be 
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described below. 

Detailed Description Text (101) : 

For the shared resource allocation, the processing illustrated in FIG. 19 is 
executed for effecting the shared resource allocation. At that time, the identifier 
assigned to the shared resource is held to check the validity of the shared 
resource by using this identifier upon access to the shared resource. 

Detailed Description Text (103) : 

When the processings 1302 and 1306 shown in FIG. 7 are executed for carrying out 
the shared resource access processing, processing illustrated in FIG. 23 is 
executed for validating the access to the shared resource. At first, before making 
access to the shared resource, the generation identifying information (602 in FIG. 
17A) stored in the identifier is compared with the generation identifying 
information (609 in FIG. 17A) of the shared resource (step 2702 in FIG. 23). 

Detailed Description Text (104): 

When coincidence is found between both the generation identifying information, it 
is then decided that the identifier of the shared resource is valid, i.e., the 
resource address (601 in FIG. 17A) contained in the identifier is valid. 
Accordingly, access is made to the shared resource by using the resource address to 
perform the processing for the shared resource. 

Detailed Description Text (105): 

On the contrary, when discrepancy is found between both the generation identifying 
information mentioned above, this means that the identifier of the shared resource 
is invalid. More specifically, assuming, by way of example, that discrepancy of the 
generation identifying information occurs in the processing step 1306 shown in FIG. 
7, this means that the shared resource is deallocated for some reason during the 
preempt -enable interval intervening between the release of the preempt disabled- 
state (step 1303 in FIG. 7) in succession to the completion of the processing 1302 
shown in FIG. 7 and the next preempt disabling (step 1305 in FIG. 7) . Thus, the 
address of the resource (shared resource) as contained in the identifier is 
invalid. Consequently, the access to the shared resource is suspended and an error 
processing (step 2703 in FIG. 23) is carried out. In the error processing, the 
preempt disabling or inhibition and/or abort disabling may be cleared as occasion 
requires . 

Detailed Description Text (106) : 

Owing to the processing method described above, deallocating of the shared resource 
carried out outside of the preempt -disabled interval can be detected. Besides, the 
access to the invalid resource which may occur in accompanying the above-mentioned 
shared resource deallocating can be prevented for thereby protecting the resource 
from being destroyed. In this way, it is possible to structure a system capable of 
processing the shared resource with enhanced security even when the preempt enable 
interval is set in the shared resource processing interval or section. 

Detailed Description Text (107) : 

As will now be appreciated from the foregoing description, according to the 
teachings of the invention disclosed herein, overhead involved in the translation 
between the address and the identifier as well as search for checking the 
presence/absence of the access right can be reduced with the access performance 
being correspondingly enhanced. Besides, the resource-access disabled interval or 
section taking place upon completion of the process can be shortened. Additionally, 
the resource can be protected against destruction due to the illegal access to the 
resource from the process imparted with no resource access right. 

CLAIMS : 

1. A process executing method for executing a given one of a plurality of processes 
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in a computer system by using one shared resource which is accessed by said 
plurality of processes executed on a processor, said method comprising the steps 
of: 

a) disabling abortion of said given one process; 

b) disabling preemption of said given one process; 

c) processing said shared resource for use by said given one process after 
disabling preemption, and enabling preemption after processing said shared 
resource; 

d) disabling preemption before succeeding processing said shared resource and 
enabling preemption after processing said shared resource; 

e ) enabling abortion of said given one process after enabling preemption; and 

f) after enabling abortion, executing a forcive termination request issued for said 
given one process during a period in which said given one process was in an abort- 
disabled state. 
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DOCUMENT- IDENTIFIER: US 5586289 A 
TITLE: Method and apparatus for accessing local storage within a parallel 
processing computer 

Abstract Text (1) : 

A processor within a parallel processing computer having a plurality of processors, 
where each processor is directly connected to a local storage memory. Each 
processor contains a principal processing element (PPE) , a memory controller, and a 
multiplexor. The PPE executes a series of program instructions including local 
storage memory access instructions that cause the PPE to produce a local storage 
memory access request for accessing information within the local storage memory. 
The memory controller is connected to the PPE and a plurality of information 
resources of the parallel processing computer. This controller selectively routes 
local storage memory access requests from the information resources to an output 
port of the memory controller and generates an enable flag that is set to a first 
state when a selected one of the plurality of information resources can access the 
local storage memory and is set to a second state when the PPE is accessing the 
local storage such that access by the information resources is deferred until 
access by the PPE is complete. The multiplexor is connected to the PPE, the memory 
controller and the local storage memory. The multiplexor, operating in response to 
the enable flag, multiplexes the PPE access request with the selected information 
resource access requests such that access by the PPE to the local storage memory 
occurs substantially without time-delay interruption of the execution of program 
instructions by the PPE. 

Brief Summary Text (5) : 

The problem of efficiently accessing dedicated local storage by a plurality of 
parallel processors has been addressed in certain prior art patents. 

Brief Summary Text ( 6) : 

For example, in U.S. Pat. No. 4,837,676 a computer architecture is described which 
attempts to achieve highly parallel execution of programs in instruction flow form. 
In this patent, individual units, such as process control units, programmable 
function units, and memory units are individually coupled together by an 
interconnection network as self-contained units. Each process control unit 
initiates its assigned processors in sequence, routing instruction packets for each 
process through the computer network and an address network in order to provide 
time share of a single communications highway by multiple instruction packet 
streams . 

Detailed Description Text (8) : 

In normal operation, the PPE 285 always has access to local memory 6. Local memory 
6 is accessed by providing an address (PPE Addr) to MUX 240, and then either 
storing data via the PPE Data Out connection to MUX 260, or reading data from local 
memory via the PPE Data-in connection. The instant invention serves to create an 
access to local memory at any time that local memory is not being used by the PPE. 

Detailed Description Text (16) : 

The LMMemEn output of MEM CTRL selects whether the memory access source is the PPE 
255 or MEM CTRL 230. In addition, the LM Data-Out output permits data transfer into 
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memory 6, while the LM Wr En output enables MUX 250 for a write operation, and the 
LM Addr output allows an address to be applied to memory 6. 

Detailed Description Text (17) : 

In FIG. 3 there is shown in greater detail the logic included within the MEM CTRL 
unit 230 of FIG . 2. The circuitry in FIG. 3 consists of Finite State Machine Logic 
(FSML) 301, Load Logic 302, Execution Unit 303, Gating Logic 304, Enable MUX 305, 
Data MUX 306, Address Masks 307, and MUX 308. 

Detailed Description Text (20) : 

The primary output of the Load Logic is either address plus data for storage in 
local memory, or just the address that will be needed in order to read data from 
local memory. 

Detailed Description Text (23) : 

Address Masks 307 and MUX 308, in conjunction with AND gate 304, serve to mask 
preselected bits from the data forwarded from the Load Logic to the Execution Unit. 
This function serves to separate the address from the data being forwarded to the 
Execution Unit. 

Detailed Description Text (27) : 

Also applied to MUX 310 is a three-bit input from flag-polling counter 312. Counter 
312 is driven at its clock input by the processor system clock (not shown) , which 
provides clock timing signals for all of the processors. Counter 312 is adopted to 
cycle through the eight three-bit binary codes in a cyclical fashion in response to 
the processor clock signals when a signal of logic level "1" is applied to counter 
312 from Active Register 314. A logic level "0" results in counter 312 maintaining 
its present value. 

Detailed Description Text (28) : 

MUX 311 is a two-by-three MUX having one input port assigned a three-bit binary 
code "000". The other input port is connected to the output of counter 312. 

Detailed Description Text (29) : 

Flip-flop 314 serves to enable counter 312 upon receipt of the next SRC signal 
which "sets" flip-flop 314. 

Detailed Description Text (53) : 

In FIG. 5, the Execution Unit consists of a "B" unit 500, a "C" unit 505, a "D" 
unit 501, and an "E" unit 509. Also included is Conditional Operation Comparator 
502, Opcode Register 504, Conditional Operation Register 503, Register 506, Counter 
508, and Comparator 507. 

Detailed Description Text (101) : 

6. f output: Increments Addr Counter for next memory access. 
Detailed Description Text (106) : 

11. 1 output: Asserts LMMemEn, which specifies that HL is providing the address . 
Detailed Description Text (114): 

internal WRn counter reset to 0. (WRn value stored in 2 bit counter 632). 
Detailed Description Text (124) : 

Assert F output signal (increments Addr Counter ) 
Detailed Description Text (130) : 

Write WRn counter value to h output, increment WRn Counter . 
Detailed Description Text (133) : 

Assert f output signal (increments Addr Counter ) 
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Detailed Description Text (137) : 

Write WRn counter value to h output, increment WRn Counter. (WRn value sent to 
Store Logic, and WRn Comparator. 

Detailed Description Text (140) : 

Assert f output signal (increments Addr Counter ) . 
Detailed Description Text (142): 

Also included is a 2-bit counter 632. The counter 632 includes a Reset input port, 
an Incr input port, and a 2-bit-wide output port, which is the WRn output port. 

Detailed Description Text (147) : 

As shown in FIG. 6, there is included a two-input OR gate 672, a three-input OR 
gate 674, and a three-input OR gate 675. The circuit also includes a MUX 676 and a 
delay unit 678. The MUX 67 6 is a l-by-4 MUX having four control-signal input ports, 
a Resource Idle output port, and an Active SRC input port. The two inputs of the 
gate 672 are connected respectively to the output of the gate 64 6, and the output 
of the gate 648. The output of the gate 672 is connected to the increment port 636 
of the counter 632. 

Detailed Description Text (150) : 

The output of the delay unit 660 is connected to the CompEn output port. The Reset 
input port of the counter 632 is connected to the Start input port of the circuit 
in FIG. 6. 

CLAIMS: 

1. In a parallel processing computer having a plurality of processors, where each 
processor is directly connected to a local storage memory, each of said processors 
comprising : 

a principal processing element (PPE) for executing a series of program instructions 
including local storage memory access instructions that cause the PPE to produce a 
local storage memory access request for accessing information within the local 
storage memory; 

a memory controller, connected to said PPE and a plurality of information resources 
of the parallel processing computer, for selectively routing local storage memory 
access requests from said information resources to an output port of said memory 
controller and for generating an enable flag that is set to a first state when a 
selected one of said plurality of information resources can access said local 
storage memory and is set to a second state when said PPE is accessing said local 
storage, where generating said first state is deferred until said PPE has completed 
accessing said local storage memory; and 

multiplexing means, connected to said PPE, said memory controller and said local 
storage memory, for multiplexing, in response to said enable flag, said PPE access 
request with said selected information resource access requests, where said first 
state of said enable flag causes said multiplexing means to permit said selected 
information resource to access said local storage memory and said second state of 
said enable flag causes said multiplexing means to permit said PPE to access said 
local storage memory substantially without time-delay interruption of the execution 
of program instructions by the PPE; wherein said memory controller further 
comprises : 

a monitor circuit, connected to each of said information resources, for identifying 
the access requests generated by said information resources and for selecting one 
of said plurality of information resources to access said local storage memory and 
for generating, in response to said access request of said selected information 
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resource/ a request signal identifying said selected information resource . 



2. The processor of claim 1 wherein said memory controller further comprises: 

an access circuit, connected to said monitor circuit, for transferring information 
between the local storage memory and said selected information resource, and where 
said access circuit generates an access-completed signal for signaling that the 
transfer of information between said local storage memory and said selected 
information resource has been completed. 

3. The processor of claim 2 wherein said access circuit further comprises: 

load logic, connected to said monitor circuit and said plurality of information 
resources, for generating a memory address for said local storage memory to access 
information from said local storage memory in response to said access request from 
said selected information resource, and, if said access request from said 
information resource is a write request, said load logic passes data from said 
selected information resource to a data output port of said load logic; and 

an execution unit, connected to said load logic, for transferring said memory 
address to said multiplexing means and, if said access request from said selected 
information resource is a write request, said execution unit passes data from said 
load logic to said multiplexing means. 

5. The processor of claim 4 wherein said double buffers are capable of storing 
variable length data words, where data words generated by a first information 
resource has a different length than a data word generated by a second information 
resource . 

6. In a parallel processing computer having a plurality of processors, where each 
processor is directly connected to a local storage memory and each processor 
includes a principal processing element (PPE) for executing a series of program 
instructions including local storage memory access instructions that cause the PPE 
to produce a local storage memory access request for accessing information within 
the local storage memory, and a memory controller, connected to said PPE and a 
plurality of information resources of the parallel processing computer, a method 
for accessing said local storage memory comprising the steps of: 

selectively routing local storage memory access requests from a selected one of 
said information resources to an output port of said memory controller; 

generating an enable flag that is set to a first state when one of said plurality 
of resources can access said local storage memory and is set to a second state when 
said PPE is accessing said local storage, where generating said first state is 
deferred until said PPE has completed accessing said local storage memory; and 

multiplexing, in response to said enable flag, said PPE access request with said 
selected information resource access requests, where said first state of said 
enable flag permits said selected information resource to access said local storage 
memory and said second state permits said PPE to access said local storage memory 
substantially without time-delay interruption of the execution of program 
instructions by the PPE; wherein the method further comprises the steps of: 

identifying the access requests generated by said information resources ; 

selecting an information resource from said plurality of information resources for 
accessing said local storage memory; and 

generating, in response to said access request from said selected information 
resource, a request signal identifying said selected information resource . 
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8. The method of claim 7 further comprising the steps of: 

generating a memory address for said local storage memory to access information 
from said local storage memory in response to said access request from said 
selected information resource; and 

transferring said memory address to said multiplexor and, if said access request is 
a write request, passing data to said multiplexor. 

10. The method of claim 9 wherein said double buffer is capable of storing variable 
length data words, where data words generated by a first information resource has a 
different length than a data word generated by a second information resource . 
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DOCUMENT-IDENTIFIER: US 5963142 A 

TITLE: Security control for personal computer 

Abstract Text (1) : 

A personal computer provides security features enabling control over access to data 
retained in the computer. The computer is secured by having the system ROM provide 
a password at power-on to a security device which controls access to the secured 
features. Once a password has been downloaded to the security device, a Protect 
Resources command is issued to the security device. To gain access to the secured 
feature after boot-up, the user provides the correct password to the security 
device and waits for approval from the security device. Since the security device 
only verifies the password and does not divulge it, security of the system is 
enhanced. Once access to protected resources is no longer required, the computer 
issues another Protect Resources command to the security device to once more lock 
access to the protected resources . 

Detailed Description Text (3) : 

Referring now to FIG. 1, a computer system S according to the present invention is 
shown. In the preferred embodiment, there are two primary buses located in the 
system S. The first bus is the PCI or Peripheral Component Interconnect bus P which 
includes an address/data portion and control signal portion. The second primary bus 
in the system S is the ISA bus I. The ISA bus I includes an address portion, a data 
portion 110, and a control signal portion 112. The PCI and ISA buses P and I form 
the backbones of the system S. 

Detailed Description Text (4 ) : 

A CPU/memory subsystem 100 is connected to the PCI bus P. The processor 200 is 
preferably the Pentium processor from Intel, preferably operating externally at 50 
or 60 MHz, but could be an 80486 from Intel or processors compatible with the 80486 
or Pentium or other processors if desired. The processor 200 provides data, 
address, and control portions 202, 204, 206 to form a host bus HB. A level 2 (L2) 
or external cache memory system 208 is connected to the host bus HB to provide 
additional caching capabilities to improve performance of the computer system. The 
L2 cache 208 may be permanently installed or may be removable if desired. A cache 
and memory controller and PCI bridge chip 210, such as the 82434X chip from Intel 
Corporation or the chip described in patent applications Ser. Nos . 08/324,016, 
entitled "SINGLE BANK, MULTIPLE WAY CACHE MEMORY" pending and 08/324,246, entitled 
"SYSTEM HAVING A PLURALITY OF POSTING QUEUES ASSOCIATED WITH DIFFERENT TYPES OF 
WRITE OPERATIONS FOR SELECTIVELY CHECKING ONE QUEUE BASED UPON TYPE OR READ 
OPERATION", filed Oct. 14, 1994, now U.S. Pat. No. 5,634,073, and hereby 
incorporated by reference, is connected to the control portion 206 and to the 
address portion 204. The bridge chip 210 is connected to the L2 cache 208 as it 
incorporates the cache controller and therefore controls the operation of the cache 
memory devices in the L2 cache 208. The bridge chip 210 is also connected to 
control a series of data buffers 212. The data buffers 212 are preferably similar 
to the 82433LX from Intel, or those described in patent applications Ser. Nos. 
08/324,246 now U.S. Pat. 5,634,073 as incorporated above and 08/323,263 entitled 
"DATA ERROR DETECTION AND CORRECTION SYSTEM", filed Oct. 14, 1994, now U.S. Pat. 
No. 5,555,250 and hereby incorporated by reference, and are utilized to handle 
memory data to a main memory array 214. The data buffers 212 are connected to the 
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processor data portion 202 and receive control signals from the bridge chip 210. 
The data buffers 212 are also connected to the PCI bus P for data transfer over 
that bus. The data buffers 212 provide a memory data bus 218 to the memory array 
214, while a memory address and memory control signal bus 220 is provided from the 
bridge chip 210. 

Detailed Description Text (7) : 

A PCI-ISA bridge 130 is provided to convert signals between the PCI bus P and the 
ISA bus I. The PCI-ISA bridge 130 includes the necessary address and data buffers 
and latches, arbitration and bus master control logic for the PCI bus, ISA 
arbitration circuitry, an ISA bus controller as conventionally used in ISA systems, 
an IDE (integrated drive electronics) interface, and a DMA controller. Preferably 
the PCI-ISA bridge 130 is a single integrated circuit, but other combinations are 
possible. A series of ISA slots 134 are connected to the ISA bus I to receive ISA 
adapter cards. A series of IDE slots 133 are connected to the ISA bus I and the 
PCI-ISA bridge chip 130 to receive various IDE devices, such as hard disk drives, 
tape drives and CD-ROM drives. A series of PCI slots 135 are connected to the PCI 
bus P to receive PCI adapter cards. 

Detailed Description Text (8) : 

A combination I/O chip 136 is connected to the ISA bus I. The combination I/O chip 
136 preferably includes a floppy disk controller, real time clock (RTC) , CMOS 
memory, two UARTs, various address decode logic and security logic to control 
access to the CMOS memory and the power on password values. A floppy disk connector 
138 for receiving a cable to a floppy disk drive is connected to the combination 
I/O chip 136 and the ISA bus I. Serial port connectors 137 are also connected to 
the combination I/O chip 136. A buffer 144 is connected to the ISA bus I to provide 
an additional X bus X for various additional components of the computer system. A 
flash ROM 154 receives its control, address and data signals from the X bus X. 
Preferably the flash ROM 154 contains the BIOS information for the computer system 
and can be reprogrammed to allow for revisions of the BIOS. An 8042 or keyboard 
controller 156 is connected to the X bus X and ISA bus I address and control 
portion. The keyboard controller 156 is of conventional design and is connected in 
turn to a keyboard connector 158 and a mouse or pointing device connector 160. 

Detailed Description Text (9) : 

A miscellaneous system logic chip 132 is connected to the X bus X. The 
miscellaneous system logic chip 132 contains counters and timers as conventionally 
present in personal computer systems, an interrupt controller for both the PCI and 
ISA buses P and I, enhanced parallel port circuitry and power management logic, as 
well as other miscellaneous circuitry. Additionally, the miscellaneous system logic 
chip 132 includes circuitry of a security management system according to the 
present invention and so is connected to the flash ROM 154 through write protection 
logic 540. 

Detailed Description Text (12) : 

Commands are preferably issued from the computer to the security device at a 
predetermined address . Status may be read from the last resource, or slot, indexed. 
The security device is capable of protecting a plurality of resources or slots. In 
the preferred embodiment shown in detail, only a single resource is protected, but 
at various locations reference is explicitly made to the plurality of resources or 
slots and those skilled in the art can readily determine appropriate modifications 
where not specifically discussed. A Read Status command is configured so that the 
status register of any particular resource, or slot, can be read, without affecting 
other operations occurring to a resource or slot, such as unlocking or changing a 
password. Access to a specific resource, or slot, in the security device is 
performed with an indexed address scheme. Two addresses are used for the indexing 
scheme, one address is for commands, while the second address is the data/status 
register. The second address acts as a data register for a write cycle and as a 
status register during a read cycle. The index is placed in the upper three bits of 
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the command register. 

Detailed Description Text (16) : 

In addition to sending commands to the security device, status can be read from the 
security device at any time, by reading the status/data register, preferably 
located at a second predetermined address adjacent to the first predetermined 
address . The data/status register serves two purposes. When serving as the data 
register, the register is used when storing passwords or verifying passwords 
(accessing resources) . 

Detailed Description Text (19) : 

Bits 7-5 provide an indication of which particular resource or slot the remaining 
bits identify . The PL bit indicates when set that this resource is permanently 
locked. The D bit indicates when set that a one second delay is in progress due to 
a password mismatch. The U bit is the state of the UNLOCK . sub . — pin or signal for 
the resource. 

Detailed Description Text (28) : 

For simplicity, while this description focuses on protecting only one resource, it 
is within the scope of the invention to have multiple resources located in multiple 
slots for passwords in the security device. This is done by the use of the 
different index values, each referencing a different resource or slot. In this 
description, the index value is always assumed to be zero to access the first slot. 
Thus, in a multiple resource embodiment, there are a plurality of eight byte 
password registers used to store passwords. In the multiple resource embodiment, 
the security device has an UNLOCK_ output for each slot. The additional slots in 
the security device can include slots for power-on password, administrator 
password, Safe Start hash codes, among others. The power-on password slot controls 
the power-on password, which is currently only changeable at boot time. If a slot 
is provided then the power-on password can be changed at run-time. In addition to 
the power-on password slot, another slot may be used to address the rest of the 
protected areas that are accessible through the Administrator password. Further, 
Safe Start codes resource is another candidate. 

Detailed Description Text (32) : 

The transition from the ACC.sub.— RESOURCE state 442 to the IDLE state 440 occurs 
when data is written to the data/status register (WRITE . sub . -- DATA); the password 
count equals zero ( PASSWD . sub . — CNT=0) , indicating that all eight bytes have just 
been written; and the SET. sub.-- MISMATCH and MISMATCH signals are deasserted. The 
SET. sub. — MISMATCH signal is set when the current byte being written is a 
mismatch, while the MISMATCH signal indicates that a byte previously written on 
this attempt mismatched. The transition from the ACC.sub.-- RESOURCE state 442 to 
the IDLE state 440 also occurs when a command other than a Read Status command is 
written to the command register. The transition from the ACC.sub. — RESOURCE state 
442 to the DELAY state 446 occurs when data is written to the data/status register 
(WRITE. sub. — DATA); the password count equals zero, indicating the last byte has 
been written; and either the SET. sub.— MISMATCH or the MISMATCH signal is 
asserted. This transition handles the event where the key and the password do not 
match. A delay of preferably one second is encountered once the DELAY state 44 6 is 
entered. This period is clocked by a count-down counter 536 (FIG. 5) whose output 
is DELAY. sub. — COUNT. Thus, upon DELAY. sub. — COUNT reaching zero, the DELAY state 
446 transitions back to the IDLE state 440. 

Detailed Description Text (37) : 

When the state machine 438 is in state ACC.sub. — RESOURCE 442 and data is written 
to the data register, the EN. sub. — PASSWD. sub. — CNT signal is asserted via an AND 
gate 474 and the OR gate 470. Further, the output of the AND gate 474 is ANDed via 
AND gate 476 with the output of a comparator 482 which compares the proper byte in 
a password register 478 with a key register 480 to generate the SET. sub. — MISMATCH 
signal. The password register 478 is actually the depth of the password, eight 
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bytes in the preferred embodiment, and the proper byte is selected based on the 
password counter 528 value. The key register 480 need only be a single byte 
register as the previous bytes of the key need not be stored. The SET. sub. — 
MISMATCH signal indicates a mismatch of the current byte and is latched to indicate 
that a mismatch has already occurred in a previous clock period. The output of the 
latching operation, the MISMATCH signal, is gated with the SET. sub. — MISMATCH 
signal using a NOR gate 484. The output of the NOR gate 484 is ANDed with the 
output of the AND gate 474 and the PASSWD.sub. — CNT=0 signal by an AND gate 486 to 
generate the CLR.sub. — PROT signal. The output of the NOR gate 484 is further 
inverted by an inverter 4 90 and then gated with the output of the AND gate 474 and 
the PASSWD.sub. — CNT=0 signal by an AND gate 492 to generate the delay signals 
SET. sub.-- DLY and SET. sub. — DLY.sub.-- CNT. 

Detailed Description Text (41) : 

Two counters 528 and 536 are used to sequence the password count and the delay 
count, respectively. Both counters 528 and 536 have the data inputs connected to 
logic high, or 5V DC, and the COUNT UP /DOWN . sub . — input wired to ground to 
indicate that the counters 528 and 536 are to count down. The SET. sub. — 
PASSWD.sub. — CNT signal is inverted by an inverter 524 and then ANDed with the 
RESET. sub. — signal via an AND gate 526, which drives the inverted load or LD.sub.- 
- signal of the counter 528 to reload the counter 528. Similarly, the EN. sub. — 
DLY.sub. — CNT signal is inverted by an inverter 532 and then ANDed with the 
RESET. sub. — signal via an AND gate 534 which drives the LD.sub. — input of the 
counter 536. The detection that the output of each of counters 528 and 536 equals 
zero is performed by an OR gate. Thus, an OR gate 530 is connected to the outputs 
of counter 528 to generate the PASSWD.sub. — CNT=0 signal. Similarly, an OR gate 
538 is connected to the outputs of counter 536 to generate the DLY.sub. — CNT=0 
signal . 

Detailed Description Text (42) : 

Turning to FIG. 6, the generation of the FRWP.sub. — signal in the preferred 
embodiment is disclosed. This signal is generated in conjunction with the 
UNLOCK. sub. — output of the security device, which is controlled through the states 
of the security device state machine as described above. In FIG. 6, the 
UNLOCK. sub. — signal and bit 7 of the data portion of the X-bus are provided to OR 
gate 537. The output of the OR gate 537 is provided to the D input of a flip-flop 
539. The CLR input of the flip-flop 539 is connected to the RESET. sub. — signal for 
resetting purposes. Further, the flip-flop 539 is clocked by the falling edge of a 
write protect register address decode signal. A write protect register was provided 
in the combination I/O chip 136 and was used to enable or disable protection of the 
flash ROM in prior systems. The use of the bit in the register is maintained in the 
preferred embodiment and is supplemented by the use of the security device to allow 
further protection of the flash ROM. To guarantee that the flash ROM is properly 
protected, that register is mirrored in the miscellaneous system logic chip 132. 
The write protect register address decode signal indicates a write to that 
register. The output of the flip-flop 439 is an FRWP.sub. — signal is used to 
control updating of the flash ROM. Thus to write to the flash ROM, the flash ROM 
resource must be unlocked using the security device and the bit in the write 
protect register must be set. 

Detailed Description Text (44): 

In addition to the connection from the write protection logic 540, the flash ROM 
164 has address inputs which are coupled to the address portion of the X bus X, 
data signals which are coupled to the data portion of the X bus X, and conventional 
chip select, output enable, and write enable inputs that are driven by circuitry on 
the computer system S when the flash ROM 164 is addressed . Once the FRWP.sub. — 
signal is true, the flash ROM 164 can be written in a manner similar to a random 
access memory (RAM) . Thus, the updating of the flash ROM 164 can be accomplished in 
a secure manner. 
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DOCUMENT- IDENTIFIER: US 6480097 Bl 

TITLE: Security control for personal computer 



Abstract Text (1) : 

A personal computer provides security features enabling control over access to data 
retained in the computer. The computer is secured by having the system ROM provide 
a password at power-on to a security device which controls access to the secured 
features. Once a password has been downloaded to the security device, a Protect 
Resources command is issued to the security device. To gain access to the secured 
feature after boot-up, the user provides the correct password to the security 
device and waits for approval from the security device. Since the security device 
only verifies the password and does not divulge it, security of the system is 
enhanced. Once access to protected resources is no longer required, the computer 
issues another Protect Resources command to the security device to once more lock 
access to the protected resources . 

Detailed Description Text (3) : 

Referring now to FIG. 1, a computer system S according to the present invention is 
shown. In the preferred embodiment, there are two primary buses located in the 
system S. The first bus is the PCI or Peripheral Component Interconnect bus P which 
includes an address/data portion and control signal portion. The second primary bus 
in the system S is the ISA bus I. The ISA bus I includes an address portion, a data 
portion 110, and a control signal portion 112. The PCI and ISA buses P and I form 
the backbones of the system S. 

Detailed Description Text (4 ) : 

A CPU/memory subsystem 100 is connected to the PCI bus P. The processor 200 is 
preferably the Pentium processor from Intel, preferably operating externally at 50 
or 60 MHz, but could be an 80486 from Intel or processors compatible with the 80486 
or Pentium or other processors if desired. The processor 200 provides data, 
address, and control portions 202, 204, 206 to form a host bus HB. A level 2 (L2) 
or external cache memory system 208 is connected to the host bus HB to provide 
additional caching capabilities to improve performance of the computer system. The 
L2 cache 208 may be permanently installed or may be removable if desired. A cache 
and memory controller and PCI bridge chip 210, such as the 82434X chip from Intel 
Corporation or the chip described in patent applications Ser. No. 08/324,016, 
entitled "SINGLE BANK, MULTIPLE WAY CACHE MEMORY" and Ser. No. 08/324,246, entitled 
"MEMORY CONTROLLER WITH WRITE POSTING QUEUES FOR PROCESSOR AND I/O BUS OPERATIONS 
AND ORDERING LOGIC FOR CONTROLLING THE QUEUES", filed Oct. 14, 1994, and hereby 
incorporated by reference, is connected to the control portion 206 and to the 
address portion 204. The bridge chip 210 is connected to the L2 cache 208 as it 
incorporates the cache controller and therefore controls the operation of the cache 
memory devices in the L2 cache 208. The bridge chip 210 is also connected to 
control a series of data buffers 212. The data buffers 212 are preferably similar 
to the 82433LX from Intel, or those described in patent applications Ser. No. 
08/324,246 as incorporated above and Ser. No. 08/323,263 entitled "DATA ERROR 
DETECTION AND CORRECTION SYSTEM", filed Oct. 14, 1994, and hereby incorporated by 
reference, and are utilized to handle memory data to a main memory array 214. The 
data buffers 212 are connected to the processor data portion 202 and receive 
control signals from the bridge chip 210. The data buffers 212 are also connected 
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to the PCI bus P for data transfer over that bus. The data buffers 212 provide a 
memory data bus 218 to the memory array 214, while a memory address and memory 
control signal bus 220 is provided from the bridge chip 210. 

Detailed Description Text (7) : 

A PCI-ISA bridge 130 is provided to convert signals between the PCI bus P and the 
ISA bus I. The PCI-ISA bridge 130 includes the necessary address and data buffers 
and latches, arbitration and bus master control logic for the PCI bus, ISA 
arbitration circuitry, an ISA bus controller as conventionally used in ISA systems, 
an IDE (integrated drive electronics) interface, and a DMA controller. Preferably 
the PCI-ISA bridge 130 is a single integrated circuit, but other combinations are 
possible. A series of ISA slots 134 are connected to the ISA bus I to receive ISA 
adapter cards. A series of IDE slots 133 are connected to the ISA bus I and the 
PCI-ISA bridge chip 130 to receive various IDE devices, such as hard disk drives, 
tape drives and CD-ROM drives. A series of PCI slots 135 are connected to the PCI 
bus P to receive PCI adapter cards . 

Detailed Description Text (8) : 

A combination I/O chip 136 is connected to the ISA bus I. The combination I/O chip 
136 preferably includes a floppy disk controller, real time clock (RTC) , CMOS 
memory, two UARTs, various address decode logic and security logic to control 
access to the CMOS memory and the power on password values. A floppy disk connector 
138 for receiving a cable to a floppy disk drive is connected to the combination 
I/O chip 136 and the ISA bus I. Serial port connectors 137 are also connected to 
the combination I/O chip 136. A buffer 144 is connected to the ISA bus I to provide 
an additional X bus X for various additional components of the computer system. A 
flash ROM 154 receives its control, address and data signals from the X bus X. 
Preferably the flash ROM 154 contains the BIOS information for the computer system 
and can be reprogrammed to allow for revisions of the BIOS. An 8042 or keyboard 
controller 156 is connected to the X bus X and ISA bus I address and control 
portion. The keyboard controller 156 is of conventional design and is connected in 
turn to a keyboard connector 158 and a mouse or pointing device connector 160. 

Detailed Description Text ( 9) : 

A miscellaneous system logic chip 132 is connected to the X bus X. The 
miscellaneous system logic chip 132 contains counters and timers as conventionally 
present in personal computer systems, an interrupt controller for both the PCI and 
ISA buses P and I, enhanced parallel port circuitry and power management logic, as 
well as other miscellaneous circuitry. Additionally, the miscellaneous system logic 
chip 132 includes circuitry of a security management system according to the 
present invention and so is connected to the flash ROM 154 through write protection 
logic 540. 

Detailed Description Text (12): 

Commands are preferably issued from the computer to the security device at a 
predetermined address . Status may be read from the last resource, or slot, indexed. 
The security device is capable of protecting a plurality of resources or slots. In 
the preferred embodiment shown in detail, only a single resource is protected, but 
at various locations reference is explicitly made to the plurality of resources or 
slots and those skilled in the art can readily determine appropriate modifications 
where riot specifically discussed. A Read Status command is configured so that the 
status register of any particular resource, or slot, can be read, without affecting 
other operations occurring to a resource or slot, such as unlocking or changing a 
password. Access to a specific resource, or slot, in the security device is 
performed with an indexed address scheme. Two addresses are used for the indexing 
scheme, one address is for commands, while the second address is the data/status 
register. The second address acts as a data register for a write cycle and as a 
status register during a read cycle. The index is placed in the upper three bits of 
the command register. 
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Detailed Description Text (16): 

In addition to sending commands to the security device, status can be read from the 
security device at any time, by reading the status/data register, preferably 
located at a second predetermined address adjacent to the first predetermined 
address . The data/status register serves two purposes. When serving as the data 
register, the register is used when storing passwords or verifying passwords 
(accessing resources) . 

Detailed Description Text .(19) : 

Bits 7-5 provide an indication of which particular resource or slot the remaining 
bits identify . The PL bit indicates when set that this resource is permanently 
locked. The D bit indicates when set that a one second delay is in progress due to 
a password mismatch. The U bit is the state of the UNLOCK_ pin or signal for the 
resource . 

Detailed Description Text (28): 

For simplicity, while this description focuses on protecting only one resource, it 
is within the scope of the invention to have multiple resources located in multiple 
slots for passwords in the security device. This is done by the use of the 
different index values, each referencing a different resource or slot. In this 
description, the index value is always assumed to be zero to access the first slot. 
Thus, in a multiple resource embodiment, there are a plurality of eight byte 
password registers used to store passwords. In the multiple resource embodiment, 
the security device has an UNLOCK^ output for each slot. The additional slots in 
the security device can include slots for power-on password, administrator 
password, Safe Start hash codes, among others. The power-on password slot controls 
the power-on password, which is currently only changeable at boot time. If a slot 
is provided then the power-on password can be changed at run-time. In addition to 
the power-on password slot, another slot may be used to address the rest of the 
protected areas that are accessible through the Administrator password. Further, 
Safe Start codes resource is another candidate. 

Detailed Description Text (32) : 

The transition from the ACC_RESOURCE state 442 to the IDLE state 440 occurs when 
data is written to the data/status register (WRITE_DATA) ; the password count eguals 
zero (PASSWD_CNT=0) , indicating that all eight bytes have just been written; and 
the SET__MI SMATCH and MISMATCH signals are deasserted. The SET_MISMATCH signal is 
set when the current byte being written is a mismatch, while the MISMATCH signal 
indicates that a byte previously written on this attempt mismatched. The transition 
from the ACC_RES0URCE state 442 to the IDLE state 440 also occurs when a command 
other than a Read Status command is written to the command register. The transition 
from the ACC_RESOURCE state 4 42 to the DELAY state 44 6 occurs when data is written 
to the data/status register (WRITE_DATA) ; the password count equals zero, 
indicating the last byte has been written; and either the SET_MISMATCH or the 
MISMATCH signal is asserted. This transition handles the event where the key and 
the password do not match. A delay of preferably one second is encountered once the 
DELAY state 44 6 is entered. This period is clocked by a count-down counter 536 
(FIG. 5) whose output is DELAY_COUNT. Thus, upon DELAY_COUNT reaching zero, the 
DELAY state 446 transitions back to the IDLE state 440. 

Detailed Description Text (37) : 

When the state machine 438 is in state ACC_RESOURCE 442 and data is written to the 
data register, the EN_PASSWD_CNT signal is asserted via an AND gate 474 and the OR 
gate 470. Further, the output of the AND gate 474 is ANDed via AND gate 476 with 
the output of a comparator 4 82 which compares the proper byte in a password 
register 478 with a key register 480 to generate the SET_MI SMATCH signal. The 
password register 478 is actually the depth of the password, eight bytes in the 
preferred embodiment, and the proper byte is selected based on the password counter 
528 value. The key register 480 need only be a single byte register as the previous 
bytes of the key need not be stored. The SET_MI SMATCH signal indicates a mismatch 
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of the current byte and is latched to indicate that a mismatch has already occurred 
in a previous clock period. The output of the latching operation, the MISMATCH 
signal, is gated with the SET_MISMATCH signal using a NOR gate 484. The output of 
the NOR gate 484 is ANDed with the output of the AND gate 474 and the PASSWD_CNT=0 
signal by an AND gate 486 to generate the CLR^PROT signal. The output of the NOR 
gate 484 is further inverted by an inverter 490 and then gated with the output of 
the AND gate 474 and the PASSWD_CNT=0 signal by an AND gate 4 92 to generate the 
delay signals SET_DLY and SET_DLY_CNT . 

Detailed Description Text (41) : 

Two counters 528 and 536 are used to sequence the password count and the delay 
count, respectively. Both counters 528 and 536 have the data inputs connected to 
logic high, or 5V DC, and the COUNT UP/DOWN_ input wired to ground to indicate that 
the counters 528 and 536 are to count down. The SET_PASSWD_CNT signal is inverted 
by an inverter 524 and then ANDed with the RESET_ signal via an AND gate 52 6, which 
drives the inverted load or LD_ signal of the counter 528 to reload the counter 
528. Similarly, the EN_DLY_CNT signal is inverted by an inverter 532 and then ANDed 
with the RESET_ signal via an AND gate 534 which drives the LD_ input of the 
counter 536. The detection that the output of each of counters 528 and 536 equals 
zero is performed by an OR gate. Thus, an OR gate 530 is connected to the outputs 
of counter 528 to generate the PASSWD_CNT=0 signal. Similarly, an OR gate 538 is 
connected to the outputs of counter 536 to generate the DLY_CNT=0 signal. 

Detailed Description Text (42) : 

Turning to FIG. 6, the generation of the FRWP_ signal in the preferred embodiment 
is disclosed. This signal is generated in conjunction with the UNL0CK_ output of 
the security device, which is controlled through the states of the security device 
state machine as described above. In FIG. 6, the UNLOCK_ signal and bit 7 of the 
data portion of the X-bus are provided to OR gate 537. The output of the OR gate 
537 is provided to the D input of a flip-flop 539. The CLR input of the flip-flop 
539 is connected to the RESET_ signal for resetting purposes. Further, the flip- 
flop 539 is clocked by the falling edge of a write protect register address decode 
signal. A write protect register was provided in the combination I/O chip 136 and 
was used to enable or disable protection of the flash ROM in prior systems. The use 
of the bit in the register is maintained in the preferred embodiment and is 
supplemented by the use of the security device to allow further protection of the 
flash ROM. To guarantee that the flash ROM is properly protected, that register is 
mirrored in the miscellaneous system logic chip 132. The write protect register 
address decode signal indicates a write to that register. The output of the flip- 
flop 439 is an FRWP_ signal is used to control updating of the flash ROM. Thus to 
write to the flash ROM, the flash ROM resource must be unlocked using the security 
device and the bit in the write protect register must be set. 

Detailed Description Text (44) : 

In addition to the connection from the write protection logic 540, the flash ROM 
164 has address inputs which are coupled to the address portion of the X bus X, 
data signals which are coupled to the data portion of the X bus X, and conventional 
chip select, output enable, and write enable inputs that are driven by circuitry on 
the computer system S when the flash ROM 164 is addressed . Once the FRWP_ signal is 
true, the flash ROM 164 can be written in a manner similar to a random access 
memory (RAM) . Thus, the updating of the flash ROM 164 can be accomplished in a 
secure manner. 
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ART-UNIT: 2173 

PRIMARY-EXAMINER: Cabeca; John 
ASSISTANT-EXAMINER: Becker; Shawn 
ATTY-AGENT-FIRM: Welte; Gregory A. 



ABSTRACT: 

Apparatus for accessing a displayable information resource and tailoring retrieved 
information to a user's requirements comprises a tag reader (18), a decoder (34) 
for identifying a coded resource address (38) carried by a tag (28), and access 
means for accessing the identified resource . A display means (14, 22, 24, 48) 
displays information loaded from the accessed information resource . The disclosed 
embodiment employs printed RF tag technology, and the information resource is an 
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Internet, intranet or extranet resource whose address (38) is a URL. The disclosed 
apparatus is embodied in an item of furniture, more specifically a table (10, 52) . 
The tag reader (18) reads a tag (28) when a tagged item (26) is placed onto a 
support surface (14), and a display is presented by the support surface (14). The 
tagged item can, for example, be a product or its packaging, a ticket or token, or 
a letter or information sheet. 

10 Claims, 23 Drawing figures 
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6363442 March 2002 Hunter et al . 710/62 

OTHER PUBLICATIONS 
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PR I MARY -EXAMINER: Khatri; Anil 
ASSISTANT-EXAMINER: Kendall; Chuck 

ATTY-AGENT-FIRM: Akin Gump Strauss Hauer & Feld LLP 
ABSTRACT: 

A microcontroller provides a register change summary resource for summarizing 
register changes. Selected system registers within each resource are coupled to 
bits in resource change registers of the register change summary resource using 
logic that tracks accesses to the system registers. Each resource change register 
is coupled to a bit in a summary register. For systems with numerous system 
registers, each summary register may be coupled to a bit in a higher-level summary 
register. The register change summary resource further provides a software- 
controlled bit mask register. A change in a summary or resource change register may 
trigger a processor interrupt. Each register in the register change summary 
resource can be reset, also under software control. The registers within the 
register change summary resource are accessible through a dedicated software 
development port. 
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A universal access controller is described. The universal resource access 
controller is coupled to a requesting system and a resource, such that when the 
requesting system desires access to the resource, the requesting system generates 
resource access request which is passed to the universal resource controller. The 
universal resource controller, in turn, uses a specific characteristic operating 
parameter of the requested resource as well as a current state of the requested 
resource to generate a corresponding sequenced universal access request command 
suitable for accessing the resource as required by the requesting system. 

18 Claims, 35 Drawing figures 
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ART-UNIT: 2635 

PRIMARY-EXAMINER: Horabik; Michael 
ASSISTANT-EXAMINER: Bangachon; William 
ATTY-AGENT-FIRM: Akin Gump Stauss Hauer & Feld LLP 

ABSTRACT: 

A personal computer provides security features enabling control over access to data 
retained in the computer. The computer is secured by having the system ROM provide 
a password at power-on to a security device which controls access to the secured 
features. Once a password has been downloaded to the security device, a Protect 
Resources command is issued to the security device. To gain access to the secured 
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feature after boot-up, the user provides the correct password to the security 
device and waits for approval from the security device. Since the security device 
only verifies the password and does not divulge it, security of the system is 
enhanced. Once access to protected resources is no longer required, the computer 
issues another Protect Resources command to the security device to once more lock 
access to the protected resources . 

18 Claims, 15 Drawing figures 
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PRIMARY- EXAMINER : Banankhah; Majid 

ATTY-AGENT-FIRM: Kinnaman, Jr., Esq.; William A. Heslin & Rothenberg, P.C. Radigan, 
Esq. ; Kevin P. 

ABSTRACT: 

A technique is disclosed for managing a workload distributed across multiple data 
processing systems to enhance shared resource access to meet a common performance 
standard. The technique includes on at least one system, measuring performance of 
the work units on the system to create local performance data, and on at least some 
of the systems sending the local performance data to at least one other system of 
the multiple data processing systems. The method further includes on at least one 
of the systems, receiving the performance data from the sending systems to create 
remote performance data, and adjusting at least one control parameter for accessing 
shared resources in response to the local and remote performance data to modify the 
performance of the work units distributed across the data processing systems to 
achieve the common performance standard. A dynamic resource clustering process is 
also employed to enhance the shared resource management. 

62 Claims, 15 Drawing figures 
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ASSISTANT-EXAMINER: Kendall; Chuck 0 
ATTY-AGENT-FIRM: Zagorin, O'Brien & Graham, LLP 

ABSTRACT: 

A host computer system is coupled to a target computer system in a computer system 
debug environment and accesses selected resources . A first function executed on the 
host, encodes a data structure with target resource descriptor information for at 
least one of the selected resources. A second function accesses the selected 
resources in accordance with the target resource descriptor information encoded in 
the data structure. 
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ABSTRACT: 

A method of accessing a resource, where the resource is accessible by a plurality 
of authorized persons. The method receives a signal representative of a first 
utterance from a first person, wherein the first utterance represents information. 
In response to the signal representative of a first utterance from a first person, 
the method determines with a computer system whether the first person is one of the 
plurality of authorized persons. The method also receives a signal representative 
of a first utterance from a second person, where the signal representative of a 
first utterance from a second person represents the same information as the 
information represented by the signal representative of a first utterance from the 
first person. In response to the signal representative of the first utterance from 
the second person, the method determines with the computer system whether the 
second person is one of the plurality of authorized persons. 
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PRIMARY- EXAMINER : Ellis; Richard L. 

ATTY-AGENT-FIRM: Schwegman, Lundberg, Woessner & Kluth, P. A. 
ABSTRACT: 

An integrated software architecture for a highly parallel multiprocessor system 
having multiple tightly-coupled processors that share a common memory efficiently 
controls the interface with and execution of programs on such a multiprocessor 
system. The software architecture combines a symmetrically integrated multithreaded 
operating system and an integrated parallel user environment. The operating system 
distributively implements an anarchy-based scheduling model for the scheduling of 
processes and resources by allowing each processor to access a single image of the 
operating system stored in the common memory that operates on a common set of 
operating system shared resources. The user environment provides a common visual 
representation for a plurality of program development tools that provide 
compilation, execution and debugging capabilities for multithreaded user programs 
and assumes parallelism as the standard mode of operation. 

6 Claims, 59 Drawing figures 
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ATTY-AGENT-FIRM: Akin, Gump, Strauss, Hauer & Feld, L.L.P. 

ABSTRACT: 

A personal computer provides security features enabling control over access to data 
retained in the computer. The computer is secured by having the system ROM provide 
a password at power-on to a security device which controls access to the secured 
features. Once a password has been downloaded to the security device, a Protect 
Resources command is issued to the security device. To gain access to the secured 
feature after boot-up, the user provides the correct password to the security 
device and waits for approval from the security device. Since the security device 
only verifies the password and does not divulge it, security of the system is 
enhanced. Once access to protected resources is no longer required, the computer 
issues another Protect Resources command to the security device to once more lock 
access to the protected resources . 

12 Claims, 15 Drawing figures 
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distributed control combining a fully-pipelined, fixed-latency, synchronous bus 
with a two-level arbitration scheme where the first level of arbitration is a 
framed, time-division-multiplexing arbitration scheme and the second level is a 
fairly-allocated round-robin scheme implemented using a token-passing mechanism. 
Both the latency and the bandwidth allocation are software programmable in real- 
time operation of the system. The present invention also provides for a 
communications system where access to a shared resource is controlled by the above 
communications protocol. Access to and from the shared resource from the subsystem 
is through a bus interface module. The bus interface modules provide a level of 
indirection between the subsystem to be connected and the shared resource. This 
allows the decoupling of system performance requirements from subsystem 
requirements. Communication over the bus is fully memory mapped. 
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ABSTRACT: 



In a multiprocessor system with shared resources, which several processors access 
via a system bus by presenting bus access requests to an arbitration unit and 
receiving from the latter access grant signals and in which the busy state of a 
resource or a conflict of consistency determine the generation of a RETRY signal 
and compel the processor, which has obtained access to the bus, to execute an 
access RETRY attempt, consecutive repeated access RETRY attempts of the same 
processor activate logic of the arbitration unit which temporarily mask, for a 
varying duration, the access requests of the same processor for the execution of 
further consecutive RETRY attempts, the varying duration first increasing as a 
function of the number of further RETRY attempts and then varying in a random 
manner. 
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ABSTRACT : 

PLO (perform locked operation) instructions containing blocking symbols are 
executed on each of multiple processors in a computer system to control coherence 
in data structures which may be changed by any of multiple processors in a computer 
system. The blocking symbol is extracted from a PLO instruction instance when 
invoked by its executing processor. Then the processor hashes the blocking symbol 
using hardware-microcode (H-M) to generate the location of a lock field in 
protected storage. The PLO instruction's blocking symbol is associated with a 
computer resource unit by software providing the PLO instruction, and the blocking 
symbol then associates the resource with a protected lock through the hashing 
operation on the blocking symbol. A processor must obtain the lock for a blocking 
symbol before the executing PLO instruction instance is allowed to make access and 
change the resource unit associated with the blocking symbol. The blocking symbol 
controls the PLO operations by serializing simultaneously PLO instruction access 
requests being made by multiple processors to the same resource unit using the same 
blocking symbol to allow only one PLO instruction instance to have exclusive access 
to the resource at a time. 
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ABSTRACT : 

A synchronization arrangement provides writer and reader entities access to an 
information resource, such as a trace buffer, located in a registry of a computer. 
The arrangement comprises a counter upon which atomic increments are performed to 
allocate entries of the trace buffer for temporarily storing trace message 
fragments provided by the writer entities. The arrangement also comprises 
reassembly queues for temporarily storing the message fragments sequentially 
retrieved from the trace buffer by the reader entities. 
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TITLE: Synchronization mechanism for providing multiple readers and writers access 
to performance information of an extensible computer system 



Abstract Text (1) : 

A synchronization arrangement provides writer and reader entities access to an 
information resource, such as a trace buffer, located in a registry of a computer. 
The arrangement comprises a counter upon which atomic increments are performed to 
allocate entries of the trace buffer for temporarily storing trace message 
fragments provided by the writer entities. The arrangement also comprises 
reassembly queues for temporarily storing the message fragments sequentially 
retrieved from the trace buffer by the reader entities. 

Brief Summary Text (20) : 

Briefly, the invention relates to a synchronization arrangement for providing 
writer and reader entities access to an information resource, such as a trace 
buffer, located in a registry of a computer. The novel arrangement generally 
comprises a counter upon which atomic increments are performed to allocate entries 
of the trace buffer for temporarily storing trace message fragments provided by the 
writer entities. The arrangement further comprises reassembly queues for 
temporarily storing the message fragments sequentially retrieved from the trace 
buffer by the reader entities. 

Brief Summary Text (24): 

The reader entities are generally responsible for detecting lost, incomplete or 
missed messages with respect to the trace buffer; preferably, the reassembly queue, 
in addition to a time-out mechanism, are used to detect these conditions. According 
to an aspect of the invention, writer entities always write fragments into the 
buffer in order so that missing fragments (other than the last fragment) can be 
easily detected. A missing last fragment may be detected using the time-out 
mechanism comprising a predetermined threshold established with respect to the 
contents of the counter . If the contents of the counter exceed this threshold 
before all the fragments of a message are retrieved by a reader, then the reader 
may assume that the fragment (and, thus, the message) is irretrievably lost. 

Detailed Description Text (12): 

FIG. 4 is a block diagram of the registry 400 embodying a hierarchical tree data 
structure architecture of nodes for managing and organizing performance 
information, such as statistics and tracing, collected by writer entities 320. Each 
node represents a single data item with a single data type; in addition, data 
collection presented by each node of the tree can be independently enabled and 
disabled. The multi-linked tree structure is located within main memory 114 (FIG. 
1) having a plurality of address locations for accessing the performance 
information. An example of a registry is provided in copending and commonly 
assigned U.S. Patent Application titled Extensible Performance Statistics and 
Tracing Registration Architecture, filed on even date herewith, which application 
is incorporated by reference as though fully set forth herein. 

Detailed Description Text (17) : 

The writer entities 320 "register" their intent to collect and store performance 
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information in registry 400 by creating objects as nodes organized within the tree 
structure. Specifically, the writer entities 320 are designated as various portions 
of the tree structure and the information they collect are also described as object 
nodes of the tree. Each object node is preferably named according to the 
performance information it collects and, also, the type of data with which it is 
associated. For example, the root object node 402 of registry 400 is named Root and 
has an associated counter (Counter ) data type. 

Detailed Description Text (29) : 

Coordination of updates of the collected statistics may be effected using atomic 
instructions for particular information collection data types. For example when 
updating a statistic using a counter data type, an atomic operation, e.g., a read- 
modify-write operation, is required because the counter has a current value. If the 
update involves incrementing that value, the contents of the counter must be read 
prior to adding one thereto, and the result is then written back to the counter . 
Since there may be multiple writer entities, the atomic operation basically "locks" 
the counter to avoid contention. The atomic operation preferably uses a hardware 
processor as the locking mechanism for the data item. 

Detailed Description Text (38) : 

In accordance with the invention, the trace synchronization arrangement is provided 
that allows writer and reader entities access to an information resource, such as a 
trace buffer, located in the registry. FIG. 7 is a schematized block diagram of the 
trace synchronization arrangement 700 comprising a fragment allocation counter 702 
upon which atomic increments are performed by writer entities to allocate entries 
of a trace buffer 710 for temporarily storing trace message fragments provided by 
the writer entities. 

Detailed Description Text (39) : 

The counter 702 is preferably a continuous rolling "up" counter whose contents 
comprises, e.g, a 32-bit word. A writer entity is allocated an entry in the buffer 
in response to performing an atomic increment on the counter . An atomic increment 
is, e.g., a read-modif y-write atomic operation that effectively "locks" the counter 
from access by other entities as the writer increments the contents of the counter . 
Specifically, the writer entity that gains control of the counter increments its 
contents and performs a modulo operation on the resulting contents; this indicates 
which entry of the trace buffer has been allocated. The writer then copies a 
fragment of the message into that buffer entry. 

Detailed Description Text (41) : 

Writer entities preferably allocate message sequence numbers using atomic 
increments of a global sequence counter 732, which is different from the trace 
buffer fragment allocation counter 702. In addition, a sequence number of "0" is 
invalid and never allocated to a writer entity. 

Detailed Description Text (42): 

Operationally, the writer entity increments the fragment allocation counter 702, 
thereby allocating one of the entries 712 of the buffer 710. For N entries, a 
particular entry may described by an atomic increment of the counter, modulo-N 
(which is the number of entries in the entire trace buffer) : 

Detailed Description Text (44): 

(i) allocate a message sequence number using the sequence counter 732; 
Detailed Description Text (45) : 

(ii) allocate an entry 712 of the trace buffer 710 using the fragment allocation 
counter 702; 

Detailed Description Text (53) : 

The novel arrangement also provides a means for avoiding allocation of a particular 
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entry by multiple writers simultaneously accessing the buffer when the fragment 
allocation counter 702 advances more than N entries. Assume a writer entity is 
interrupted in the midst of copying fragments into the buffer and the period of 
interruption is sufficient to allow allocation of N additional entries to other 
writers. The next N+l entry is already being copied into by the interrupted writer 
entity; however, this entry will also be allocated to a different writer entity, 
causing the two writers to collide. 

Detailed Description Text (57): 

As noted, the reader entities are generally responsible for detecting lost, 
incomplete or missed messages with respect to the trace buffer; preferably, the 
reassembly queue, in addition to a time-out mechanism, are used to detect these 
conditions. According to an aspect of the invention, since writer entities always 
write fragments in order, fragments (other than the last fragment) that are missing 
can be easily detected. A missing last fragment may be detected using the time-out 
mechanism comprising a predetermined threshold established with respect to the 
contents of the counter 702. Specifically, if the contents of the counter exceed 
the threshold before all the fragments of a message are retrieved by a reader, then 
the reader may assume that the message is irretrievably lost. In the illustrative 
embodiment described herein, the predetermined threshold is preferably half the 
number of entries . 

Detailed Description Text (58): 

For example, assume there are 100 entries (with sequence numbers 1-100) in the 
trace buffer and the first fragment that is retrieved by a reader entity is 
fragment number 5 of message sequence number 50. If the counter 702 progresses to 
message sequence number 100 and the reader has yet to retrieve fragment numbers 1-4 
of message sequence number 50, those fragments are presumed lost and that message 
is incomplete. 

Detailed Description Text (59) : 

Moreover, each reader maintains a private copy of the contents of the fragment 
allocation counter 702. As a fragment is retrieved from the trace buffer, this 
private copy is compared with the contents of that counter . If the difference 
between the resulting values is greater than N (the number of trace buffer 
entries), the reader has missed at least one entire set of trace buffer fragments. 
Accordingly, the reader starts over with the oldest fragment in the buffer. The 
oldest fragment in a trace buffer may be calculated as follows: 

Detailed Description Text (68): 

Specifically, reader entities poll for new message fragments using their private 
copies of the fragment allocation counter 702 to detect when they have read as many 
fragments as possible. If a private copy matches the counter contents, the reader 
has reached the youngest fragment in the trace buffer and that reader entity 
transitions to an "idle" state. In addition, if a reader encounters a "0"-valued 
sequence number in a fragment, the reader knows a writer was interrupted and 
proceeds to transition to its idle state (subject, of course, to the time-out 
mechanism described above) . Finally, if a sequence number is encountered in the 
youngest fragment that indicates the fragment is "older" than the time-out period, 
then a writer entity was interrupted between allocating a message sequence number 
and "zeroing" the sequence number in the fragment entry; accordingly, the reader 
can transition to its idle state. 

CLAIMS : 

1. A synchronization arrangement for use by reader and writer entities executing on 
a computer having a memory, the synchronization arrangement comprising: 

an information resource located in the memory of the computer, the information 
resource having a plurality of entries and being accessible by the reader and 
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writer entities; 

a first counter operatively coupled to the writer entities for having atomic 
increments performed thereon, the first counter configured to allocate a specific 
entry of the information resource to a given writer entity in response to the 
performance of an atomic increment by the given writer entity, the resource entries 
temporarily storing messages sequentially posted by the writer entities; 

means for limiting allocation of the entries of the information resource to the 
writer entities except through the first counter ; and 

a reassembly queue for temporarily storing messages sequentially retrieved from the 
resource by the reader entities, 

wherein only one writer entity, at any given time, is allocated a specific entry of 
the information resource. 

2. The synchronization arrangement of claim 1 further comprising a time-out 
mechanism for detecting incomplete messages retrieved from the resource, the time- 
out mechanism comprising a predetermined threshold established by contents of the 
first counter, wherein a message is incomplete if it is not completely retrieved by 
a reader entity before the contents of the first counter exceed the predetermined 
threshold. 

4. The synchronization arrangement of claim 3 wherein each fragment contains a 
fragment number and a sequence number, the sequence number being sequentially 
assigned to each message prior to being apportioned into fragments by a second 
counter . 

5. The synchronization arrangement of claim 4 wherein the first counter is a 
fragment allocation counter and the second counter is a sequence allocation 
counter, and wherein a sequence number of zero is an invalid sequence number that 
signifies copying of a fragment into a trace buffer entry. 

9. A method for providing reader and writer entities access to a trace buffer 
located in a memory of a computer to reliably exchange complete trace messages, the 
method comprising the steps of: 

allocating entries of the trace buffer to the writer entities using a counter 
responsive to atomic increments thereon, the trace buffer entries temporarily 
storing trace messages sequentially provided by the writer entities; 

temporarily storing the trace messages sequentially retrieved from the trace buffer 
by the reader entities using a reassembly queue; and 

detecting incomplete trace messages retrieved from the trace buffer using a time- 
out mechanism comprising a predetermined threshold established by contents of the 
counter, wherein a trace message is incomplete if it is not completely retrieved by 
a reader entity before the contents of the counter exceed the predetermined 
threshold. 

15. The synchronization arrangement of claim 1 wherein the first counter defines 
corresponding contents and a writer entity, having control of the first counter, 
either increments or decrements its corresponding contents and performs an 
operation on the resulting contents to identify the entry of the information 
resource being allocated. 
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